Some bugs after installing version 14

[peetn]

Yes, spd8020 indeed.

Thanks for the files! I found out I have to load them with insmod. Is that correct?
I didn't get it working with modprobe.

Loading ip_tables.ko and iptable_filter.ko was enough.
iptables -L -n works. So far so good.

However, inserting an entry like iptables -A POSTROUTING -t nat -o eth0 -j MASQUERADE returns this error:

Code: Select all

iptables v1.4.12.2: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

I tried to load iptable_nat.ko but got this error:

Code: Select all

insmod: can't insert './iptable_nat.ko': unknown symbol in module or invalid parameter

From dmesg:

Code: Select all

iptable_nat: Unknown symbol nf_nat_packet (err 0)
iptable_nat: Unknown symbol nf_nat_setup_info (err 0)
iptable_nat: Unknown symbol nf_nat_icmp_reply_translation (err 0)

Then I tried to load all modules.
Not all succeeded. These failed with the same type of error:

ipt_MASQUERADE.ko
ipt_NETMAP.ko
ipt_REDIRECT.ko
iptable_nat.ko

From dmesg:

Code: Select all

ipt_MASQUERADE: Unknown symbol nf_nat_setup_info (err 0)
ipt_NETMAP: Unknown symbol nf_nat_setup_info (err 0)
ipt_REDIRECT: Unknown symbol nf_nat_setup_info (err 0)

So I guess there is a file missing?

[fvdw]

loading modules often require a specific order

You should put them in the folder /lib/modules/2.6.39.4

and make them executable using chmod command
chmod 755 name of module

After that modprobe should work, before uising modprobe
use the command

Code: Select all

depmod

This will update the database in the modules folder and now when using modprobe all dependent modules should be loaded as well

[peetn]

Thanks again. You are very helpful!
I had tried that route before but hadn't executed "depmod".
That seems to be the key :thumbup
Now modprobe ip_tables works rightaway! No more error messages.

However, I get the same result when trying to add a rule.

Code: Select all

iptables v1.4.12.2: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)

If I try to load it 'extra' with modprobe iptable_nat, I get this:

Code: Select all

modprobe: module 'nf_nat' not found
modprobe: 'iptable_nat.ko': unknown symbol in module or invalid parameter

dmesg gives me the same output as earlier.

[fvdw]

seems you miss attached module

[peetn]

Yes! That's it. It's running now! :applause
And indeed, I have internet access now through VPN.
Thanks a lot.

So to summarize, these were the remaining steps:
- copy the ko files from both zip-files provided by fvdw to /lib/modules/2.6.39.4
- make them 755

Code: Select all

depmod
modprobe ip_tables
iptables -A POSTROUTING -t nat -o eth0 -j MASQUERADE
iptables -A POSTROUTING -t nat -o ppp+ -j MASQUERADE

And then start openvpn. Perfect!

[Jocko]

well done peetn :applause

Note

Next, I updated /etc/ppp/options.pptpd as described in the link.

For openVPN is useless, work only the pptp server

[peetn]

Thanks.
Probably the same for this one containing PPP:

Code: Select all

iptables -A POSTROUTING -t nat -o ppp+ -j MASQUERADE

Seems to work without that line too.

[Jocko]

Yes, of course etho is used by openVPN and ppp0 by pptp

[spidercat]

Hello,

i need iptables NAT package that in FW15 is not included, i see that attached file in this thread is for Philips SPD8020 infact if i try to load into my NS2 i receive : "insmod: can't insert 'iptable_nat.ko': invalid module format".
Can you please send me the same modules compiled for NS2 ?
Thanks a lot
Regards

[fvdw]

yes that will not work, the kernel on spd8020 is different then on nwsp2, kernel modules are kernel dependent

In nwsp2 kernel iptables support is already included and there is no need to load a kernel module