Bug#961723: 2.2.0-RC2

[Cinci56Sase]

 
 

 Thank you ryutaroh@
 
Manually compiling 2.2.0-RC2 works fine as instructed in the INSTALL file in 
the sources.
 

 
I did apt install libnftnl-dev and libmnl-dev and configured with pcp-peer, 
portinuse and firewall=nftables
 

 
 

 
 

Bug#961723: miniupnpd: does not work with the default iptables by update-alternatives

[Ryutaroh Matsumoto]

> it seems there is no way to
> enable iptables and nftables in a single binary.

I wonder if we can use update-alternatives.
update-alternatives x-window-manager works as explained in
https://debian-handbook.info/browse/en-US/stable/sect.customizing-graphical-interface.html

Ryutaroh

Bug#961723: miniupnpd: does not work with the default iptables by update-alternatives

[Ryutaroh Matsumoto]

> I agree nftables is better, however switching to nftables will
> definitely disappoint legacy iptables, and it seems there is no way to
> enable iptables and nftables in a single binary.

Thank you for paying your attention to this.
Lots of bugs related to nftables had been fixed recently as
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.2.0-RC1.tar.gz

If the miniupnpd package is updated with nftables,
it should package 2.2.0-RC1 or newer...

Ryutaroh

Bug#961723: miniupnpd: does not work with the default iptables by update-alternatives

[Yangfl]

On Thu, 28 May 2020 21:05:43 +0900 Ryutaroh Matsumoto
 wrote:
> Package: miniupnpd
> Version: 2.1-6.1
> Severity: important
>
> Dear Maintainer,
>
> When iptables Debian package is installed,
> we have two versions, iptables-nft and iptables-legacy.
> The default in Buster and Bullseye is iptables-nft, as
> https://wiki.debian.org/iptables
>
> /etc/miniupnpd/iptables_init.sh registers chain MINIUPNPD
> by iptables_nft.
> But
> https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/netfilter/iptcrdr.c
> tries to find chain MINIUPNPD by the legacy interface, and
> miniupnpd fails with
> chain MINIUPNPD not found
> when a new redirection is added.
>
> It MIGHT be good idea to build the package with
> ./configure --firewall=nftables ...
> Or, call update-alternatives --set iptables /usr/sbin/iptables-legacy
> by the installation script...
>
> Best regards, Ryutaroh Matsumoto

I agree nftables is better, however switching to nftables will
definitely disappoint legacy iptables, and it seems there is no way to
enable iptables and nftables in a single binary.

Bug#961723:

[Felix-Etienne Gauthier]

I agree! It would be nice to have a package for nftables.


[image: Mailtrack]

Sender
notified by
Mailtrack

15/06/20
à 20:36:49

Bug#961723: miniupnpd: does not work with the default iptables by update-alternatives

[Ryutaroh Matsumoto]

Package: miniupnpd
Version: 2.1-6.1
Severity: important

Dear Maintainer,

When iptables Debian package is installed,
we have two versions, iptables-nft and iptables-legacy.
The default in Buster and Bullseye is iptables-nft, as
https://wiki.debian.org/iptables

/etc/miniupnpd/iptables_init.sh registers chain MINIUPNPD
by iptables_nft.
But
https://github.com/miniupnp/miniupnp/blob/master/miniupnpd/netfilter/iptcrdr.c
tries to find chain MINIUPNPD by the legacy interface, and
miniupnpd fails with
chain MINIUPNPD not found
when a new redirection is added.

It MIGHT be good idea to build the package with
./configure --firewall=nftables ...
Or, call update-alternatives --set iptables /usr/sbin/iptables-legacy
by the installation script...

Best regards, Ryutaroh Matsumoto


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.6.0-1-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8), 
LANGUAGE=ja_JP.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages miniupnpd depends on:
ii  debconf [debconf-2.0]  1.5.74
ii  init-system-helpers1.57
ii  iproute2   5.6.0-1
ii  iptables   1.8.4-3
ii  libc6  2.30-8
ii  libip4tc2  1.8.4-3
ii  libip6tc2  1.8.4-3
ii  lsb-base   11.1.0
ii  net-tools  1.60+git20180626.aebd88e-1
ii  uuid-runtime   2.35.2-2

miniupnpd recommends no packages.

miniupnpd suggests no packages.

-- debconf information:
* miniupnpd/ip6script: false
* miniupnpd/start_daemon: true
* miniupnpd/listen: enp0s25
* miniupnpd/iface: ip6tnl1
* miniupnpd/force_igd_desc_v1: false