Notices


Reply
Thread Tools
Posts: 238 | Thanked: 131 times | Joined on May 2011 @ Bulgaria
#31
Hi to all,maybe this is off topic but i have to try to ask.I want to block traffic to facebook from n900 to my laptop.Command which i use is:
iptables -t nat -I PREROUTING -i wlan0 -m tcp -p tcp -d www.facebook.com --dport 443 -j DROP
but i have still access to facebook site,maybe i should try first with:
echo "1" > ... and then arpspoof ....
and finally with iptables ......

then i decided to bock all traffic with:
iptables -F
iptables -A INPUT -j REJECT
iptables -A OUTPUT -j REJECT
iptables -A FORWARD -j REJECT
but again no result

one more try to drop all incoming connections on a specific network interface with:
iptables -A INPUT -i wlan0 -s 192.168.0.0/16 -j DROP
no result
if anyone from you made some progress with these tools,let share it

info about commands for iptables from here
http://linuxconfig.org/collection-of...iptables-rules
 

The Following User Says Thank You to disappear For This Useful Post:
Posts: 78 | Thanked: 84 times | Joined on Aug 2012
#32
Hi, sorry if I've missed this.. But I can't see how this will automatically start at boot. My settings don't seem to be saved after exit (and saving) either. It seems easiest to save the iptables rules and then start at boot with an upstart script perhaps.
 
Halftux's Avatar
Posts: 868 | Thanked: 2,515 times | Joined on Feb 2012 @ Germany
#33
Originally Posted by independent View Post
Hi, sorry if I've missed this.. But I can't see how this will automatically start at boot. My settings don't seem to be saved after exit (and saving) either. It seems easiest to save the iptables rules and then start at boot with an upstart script perhaps.
This function is not implemented at the moment. The save function save only the settings from the application.

- I will add an option to load iptables rules at startup for the next release
 

The Following 3 Users Say Thank You to Halftux For This Useful Post:
Halftux's Avatar
Posts: 868 | Thanked: 2,515 times | Joined on Feb 2012 @ Germany
#34
Ok next update 1.0.3 should be soon available.

Under local->settings there is some checkbox for iptables persistence reboot...

If this checkbox is enabled and you push the "gen" button, to generate your rules, another file will be created in /etc/network/if-up.d/iptables. This will automatically run your rules file.

To delete this file you can use the "delete boot file" button.
Attached Images
 
 

The Following 5 Users Say Thank You to Halftux For This Useful Post:
Posts: 2,290 | Thanked: 4,134 times | Joined on Apr 2010 @ UK
#35
Did you see my comments on http://maemo.org/packages/package_in...genwall/1.0.2/
__________________

Wiki Admin
sixwheeledbeast's wiki
Testing Squad Subscriber
- mcallerx - tenminutecore - FlopSwap - Qnotted - zzztop - Bander - Fight2048 -


Before posting or starting a thread please try this.
 

The Following 5 Users Say Thank You to sixwheeledbeast For This Useful Post:
peterleinchen's Avatar
Posts: 4,118 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#36
Yep, second that.
And a nice little tiny desktop file would be nice (it is a GUI not cli).
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature
 

The Following 3 Users Say Thank You to peterleinchen For This Useful Post:
Halftux's Avatar
Posts: 868 | Thanked: 2,515 times | Joined on Feb 2012 @ Germany
#37
Originally Posted by sixwheeledbeast View Post
Could you please tidy up the unnecessary files in the package and modify the packages not to depend on rootsh. You should use a sudoers.d file if it requires root. Thank you.[/url]
You mean unnecessary files from deb package?
I really tried all method to gain root access also with a sudoers.d file.
However I open some shell session and calling also some scripts with the main application and when I used sudoers.d It can start genwall as root but every new session is not a root session. I will look into my application maybe there is another way to open a sub session as root.

I think rootsh is also required because I ask for a root password at startup. No rootsh no password or am I wrong?

Last edited by Halftux; 2014-02-03 at 11:28.
 

The Following 2 Users Say Thank You to Halftux For This Useful Post:
Halftux's Avatar
Posts: 868 | Thanked: 2,515 times | Joined on Feb 2012 @ Germany
#38
Originally Posted by peterleinchen View Post
Yep, second that.
And a nice little tiny desktop file would be nice (it is a GUI not cli).
I think I shouldn't update my application and need to remove before reinstall. I didn't know that it has no desktop file.

It should has a desktop file under network, which runs a script in
/opt/genwall/genwall_desk.sh

Thanks for the input.
 

The Following User Says Thank You to Halftux For This Useful Post:
peterleinchen's Avatar
Posts: 4,118 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#39
Hey halftux,

what kind of prob'ems with sudoers.file you ran into?
In general you put a file with all.your desired applications and scripts into /etc/sudoers.d and run once update-sudoers from postinstall script. Then you are able/allowed to call that app with 'sudo /opt/genwall/genwall' and there is no need for "sudoing" like genwall_desktop.sh.
For your new.sh sessions IDK, but you are safe to move out your desired sh actions into dedicated scripts and add/allow them also into sudoers file (worked for me. You need to call them then with 'sudo ,yScript inside your app). Also you might run complete GUI as user and only run scripts needing root access. Just as a reminder
About root password without rootsh I really do not know as it is too long time ago
__________________
SIM-Switcher, automated SIM switching with a Double (Dual) SIM adapter
--
Thank you all for voting me into the Community Council 2014-2016!

Please consider your membership / supporting Maemo e.V. and help to spread this by following/copying this link to your TMO signature:
[MC eV] Maemo Community eV membership application, http://talk.maemo.org/showthread.php?t=94257

editsignature, http://talk.maemo.org/profile.php?do=editsignature
 

The Following 3 Users Say Thank You to peterleinchen For This Useful Post:
Halftux's Avatar
Posts: 868 | Thanked: 2,515 times | Joined on Feb 2012 @ Germany
#40
@peterleinchen

I am sorry I removed everything and install the deb again and everytime I get a desktop file. I can't reproduce your situation.

Do you have these files?:

\usr\share\icons\hicolor\64x64\apps\genwall.png
\usr\share\application\hildon\genwall.desktop


And rootsh is not needed for set a root password. I think when I bought this phone I didn't know that it has a default root password and I read somewhere when you install openssh server you can set a root password. I mixed up openssh with rootsh. So I will try to optimize my script calls and qt console calls so that they will work with sudoers.d and removing rootsh.
 

The Following 3 Users Say Thank You to Halftux For This Useful Post:
Reply


 
Forum Jump


All times are GMT. The time now is 02:46.