maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   SailfishOS (https://talk.maemo.org/forumdisplay.php?f=52)
-   -   MMS IPv6 Broken in SFOS 3.0.2.8 Oulanka (https://talk.maemo.org/showthread.php?t=100707)

wolke 2019-04-01 08:20

MMS IPv6 Broken in SFOS 3.0.2.8 Oulanka
 
connman firewall updates (3.0.1 => 3.0.2) broke my IPv6 MMS (T-mobile USA).

i have no idea how to add a specific iptables rule to fix just MMS, so i just undid the big global change in /etc/connman/firewall.conf:
IPv6.INPUT.POLICY = DROP
=>
IPv6.INPUT.POLICY = ACCEPT

p.s.: anyone have a better suggestion for a more specific fix?

Halftux 2019-04-01 10:27

Re: MMS IPv6 Broken in SFOS 3.0.2.8 Oulanka
 
Maybe this command could help. I don't know if it is tcp or udp, so maybe you need to modify the command.

Code:

/sbin/ip6tables -A INPUT -m state --state NEW -m tcp -p tcp --dport 8008 -j ACCEPT
EDIT: the port could be 8080 for US you need to try. Ah that would be the outgoing port. I don't know on which port sailfish is listen btw, need to check later (normally SMPP when operating over TCP is 2775).

I am working on a gui (genwall) to also implement this in the future.

nieldk 2019-04-01 17:33

Re: MMS IPv6 Broken in SFOS 3.0.2.8 Oulanka
 
My best guess would be DNS setup in the ipv6 rules.
Try to just allow UDP/(TCP perhaps also) for port 53

Halftux 2019-04-01 18:09

Re: MMS IPv6 Broken in SFOS 3.0.2.8 Oulanka
 
Quote:

Originally Posted by nieldk (Post 1555854)
My best guess would be DNS setup in the ipv6 rules.
Try to just allow UDP/(TCP perhaps also) for port 53

Yes but then also the browser wouldn't work, or does only mms go with ipv6?

So I couldn't try because I have no small sim with mms function.:(

We need more informations, if you don't have ip6tables command you need to install iptables-ipv6 package.

With active mobile data connection do:
Code:

lsof -Pn -i > netinfo.txt
ip6tables --list >> netinfo.txt

And attach the file please.
You could also check, with lsof command, for connections when you receive a mms.

You could also configure ip6tables to log rejected tcp packages, I would set "--log-level notice". And then you can check with:

Code:

journalctl -k
the rejected connections.


All times are GMT. The time now is 21:08.

vBulletin® Version 3.8.8