Skip navigation.
Home
The QNX Community Portal

View topic - IPFilter for 6.2 NC

IPFilter for 6.2 NC

Discussion about the QNX6 OS.

IPFilter for 6.2 NC

Postby mem16421 » Fri Aug 16, 2002 1:52 pm

Is there a version of ipfilter that will work with 6.2 NC? I installed ipfilter 3.4.6, and it seems to startup correctly, but does not function. The newest version 3.4.27 will only work with PE/SE since it uses the tcpip-v6 stack.

Anyone found a solution?

Thanks,
Mark
mem16421
Active Member
 
Posts: 31
Joined: Wed Aug 14, 2002 12:45 pm
Location: Michigan, United States

Postby noc » Fri Aug 16, 2002 4:19 pm

Have you checked xtang's ipfilter site?
http://www.qnxzone.com/~xtang/ipfilter/
I haven't tried the binary and don't know if it works for 6.2NC, but since the patched source is also on that site, it shouldn't be too difficult to compile one yourself.
xtang might be able to give you more info.
noc
Senior Member
 
Posts: 1634
Joined: Sat Jul 06, 2002 4:34 am

Postby mem16421 » Fri Aug 16, 2002 5:24 pm

That is the version I tried.... Thanks for responding.

I am working with xtang now, I hope he can get it working. This has turned into a personal quest now :-D
mem16421
Active Member
 
Posts: 31
Joined: Wed Aug 14, 2002 12:45 pm
Location: Michigan, United States

Postby mem16421 » Sat Aug 17, 2002 8:55 pm

Well I ended up reloading QNX 6.1... IPFilter works great now. All I can hope is that xtang will port a version for 6.2 NC :-) Maybe is I pay him money :-) Lots and lots of money :-D
mem16421
Active Member
 
Posts: 31
Joined: Wed Aug 14, 2002 12:45 pm
Location: Michigan, United States

Use the 6.1 package on 6.2?

Postby cdm » Mon Aug 19, 2002 7:38 am

For the most part all things that worked on 6.1 will work, without rebuilding, on 6.2. There may be some expcetions. So you could have just used the 6.1 package you are using on 6.2 without installing 6.1. ;) I think I posted a reply a couple of minutes ago on osnews.com about the same issue - perhaps to the same person?
cdm
QNX Master
 
Posts: 789
Joined: Fri Jul 05, 2002 9:38 am

Postby mem16421 » Mon Aug 19, 2002 10:44 am

I tried the 6.1 IPFilter package on 6.2, but too many odd things kept happening. Netmanager would hang everytime after loading ipfilter.so, xtang had me use external_arp as an option to npm.tcpip.so, and that made the interfaces unavailable. Once I loaded 6.1 with IPFilter, it came right up... no problems. So this might be one of those programs that just isn't compatible. IPFilter is the only program that is keeping me from upgrading to 6.2 too. :x

Thanks for the response
mem16421
Active Member
 
Posts: 31
Joined: Wed Aug 14, 2002 12:45 pm
Location: Michigan, United States

ipfilter on 6.2

Postby cdm » Mon Aug 19, 2002 7:09 pm

Should work just fine. I know others that are using it without issue on 6.2.
cdm
QNX Master
 
Posts: 789
Joined: Fri Jul 05, 2002 9:38 am

Postby mem16421 » Mon Aug 19, 2002 10:46 pm

Great!

I would love to know who they are, so I can find out what they are doing differently. Could you get me in contact with them?

Thanks!
mem16421
Active Member
 
Posts: 31
Joined: Wed Aug 14, 2002 12:45 pm
Location: Michigan, United States

Postby mem16421 » Tue Aug 20, 2002 12:45 pm

Here is basically what is happening when I load IPFilter 3.4.6 on 6.2:

host config:
en0 - ne2000 - dhcp
en1 - el900 - 192.168.1.1

config file:
map en0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp
map en0 192.168.1.0/24 -> 0/32 portmap tcp/udp 20000:40000
map en0 192.168.1.0/24 -> 0/32

I type:

#slay io-net
#io-net -d ne2000 -d el900 -p tcpip forward
#dhcp.client en0
#ifconfig en1 192.168.1.1
#mount -T io-net nfm-ipfilter.so
#ipnat -FC -f/etc/ipfd.conf
#netmanager
#ipf -y

At this point it behaves like it is not installed. ipfstat shows no stats. I can ping both interfaces from an internal host. Nothing appears to function.

Now if I load io-net like this: (as xtang suggested)

#io-net -d ne2000 -d el900 -p tcpip external_arp

I now get ipfstat information. I reports that it is passing packets, but from an internal host I get no response from en1. Externally I get no response from en0. From the host running IPFilter I cannot ping either of my own interfaces. And it hangs every time I run netmanager.

At first I thought I was configuring something wrong, but if I follow the same steps above with ipfilter 3.4.6 on 6.1 it works!

So my conclusion is either something has to be configured differently to get it to work on 6.2, or version 3.4.6 doesn't work with 6.2.

I am open to any suggestions. I have another HD loaded with 6.2 ready to try anything.

Mark :D
mem16421
Active Member
 
Posts: 31
Joined: Wed Aug 14, 2002 12:45 pm
Location: Michigan, United States


Return to QNX6 - OS

Who is online

Users browsing this forum: Majestic-12 [Bot] and 4 guests

cron