Re: [Server-devel] iptables generation

2009-09-09 Thread Joshua N Pritikin
On Wed, Sep 09, 2009 at 07:23:38PM +0200, Martin Langhoff wrote: > On Wed, Sep 9, 2009 at 6:00 PM, Martin > Langhoff wrote: > > I've integrated your script, with some changes to make it atomic, as > > you can see at > > > >   http://dev.laptop.org/git/projects/xs-config/commit/ > > And pushed out

Re: [Server-devel] iptables generation

2009-09-09 Thread Martin Langhoff
On Wed, Sep 9, 2009 at 6:00 PM, Martin Langhoff wrote: > I've integrated your script, with some changes to make it atomic, as > you can see at > >   http://dev.laptop.org/git/projects/xs-config/commit/ And pushed out the RPM too after testing it quite a bit. The NAT'ing problems were related to m

Re: [Server-devel] iptables generation

2009-09-09 Thread Martin Langhoff
Hi Joshua, I've integrated your script, with some changes to make it atomic, as you can see at http://dev.laptop.org/git/projects/xs-config/commit/ There are some problems, however, with the NAT setup. In my setup here, we clearly need to provide a -s parameter to definte the src addresses. A

Re: [Server-devel] iptables generation

2009-08-24 Thread Martin Langhoff
Hi Joshua, Thanks for this! I'll be playing with it today a bit. I think it is good, though I will make it default to eth0 as the WAN port :-) cheers, martin On Mon, Aug 24, 2009 at 7:29 AM, Joshua N Pritikin wrote: > On Tue, Aug 11, 2009 at 10:15:39PM +0530, Joshua N Pritikin wrote: >> On Tue

Re: [Server-devel] iptables generation

2009-08-23 Thread Joshua N Pritikin
On Tue, Aug 11, 2009 at 10:15:39PM +0530, Joshua N Pritikin wrote: > On Tue, Aug 11, 2009 at 11:45:15AM +0530, Joshua N Pritikin wrote: > > + if re.match('@@MASQ@@', line): > > + print '-A POSTROUTING -o %s -j MASQUERADE' % wan > > This is dumb. I'll try to fix the patch tomorrow to s

Re: [Server-devel] iptables generation

2009-08-11 Thread Joshua N Pritikin
On Tue, Aug 11, 2009 at 11:45:15AM +0530, Joshua N Pritikin wrote: > + if re.match('@@MASQ@@', line): > + print '-A POSTROUTING -o %s -j MASQUERADE' % wan This is dumb. I'll try to fix the patch tomorrow to substitute only @@WAN@@. Or do you really want this written in sed? (I never

Re: [Server-devel] iptables generation (was Re: pppd restarting mysteriously)

2009-08-10 Thread Joshua N Pritikin
On Mon, Aug 10, 2009 at 08:55:55PM +0200, Martin Langhoff wrote: > On Fri, Aug 7, 2009 at 2:15 PM, Joshua N Pritikin wrote: > > Here is the script I promised Martin. > > Right - thanks for that! I assume it works well and it's been tested > for normal and ppp0 connectivity over there. How do you t

Re: [Server-devel] iptables generation (was Re: pppd restarting mysteriously)

2009-08-10 Thread Martin Langhoff
On Fri, Aug 7, 2009 at 2:15 PM, Joshua N Pritikin wrote: > Here is the script I promised Martin. Right - thanks for that! I assume it works well and it's been tested for normal and ppp0 connectivity over there. How do you trigger it? Can you load the ruleset even if ppp0 is down? I am wondering -

[Server-devel] iptables generation (was Re: pppd restarting mysteriously)

2009-08-07 Thread Joshua N Pritikin
Here is the script I promised Martin. >From f7333e727d7c3d89c3f6bc727dba7061d7ae584d Mon Sep 17 00:00:00 2001 From: Joshua Pritikin Date: Fri, 7 Aug 2009 10:26:23 +0530 Subject: [PATCH] Automate iptable rules generation --- sysconfig/iptables-config |7 + sysconfig/olpc-scripts