View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0004581GNUnetexit daemonpublic2016-06-17 18:132022-10-22 13:13
ReporterlynX Assigned ToDue Date
PrioritylowSeverityfeatureReproducibilityalways
Status assignedResolutionopen 
OSFreeBSDOS Version9.3-RELEASE-p1 
Product VersionGit master 
Target Version1.0.0 
Summary0004581: iptables not available on FreeBSD
Descriptionhttps://gnunet.org/book/export/html/1605 mentions exit/VPN possibly working on BSD, but unfortunately /usr/include/net/if_tun.h provides a lot less features than linux/if_tun.h. I added some ifdefs to correct the include and avoid some ioctls that do not exist on BSD, but the fact that gnunet-helper-exit tries to call "iptables" makes this feature currently not very portable to BSD.

I suppose it is pointless to commit my patches that allow gnunet-helper-exit to compile if it can't possibly work.
Additional InformationFatal: executable iptables not found in approved directories: No such file or directory
Fatal: executable iptables not found in approved directories: No such file or directory
Fatal: executable iptables not found in approved directories: No such file or directory
TagsNo tags attached.

Activities

Christian Grothoff

2016-08-03 09:50

manager   ~0011000

Is it so hard to figure out how to translate the iptables invocations to corresponding FreeBSD incantations?

nikita

2019-03-21 13:24

reporter   ~0014230

It seems to me as if this bug would be solved once the rewrite of -dns-helper I was told about
is done?

Christian Grothoff

2019-04-05 21:13

manager   ~0014259

Yes, but this would require a _major_ rewrite of gnunet-service-dns to basically turn it into a DNS server instead of a DNS query interceptor.

nikita

2019-09-10 08:38

reporter   ~0014879

Last edited: 2019-09-10 08:40

meanwhile could I add pf and/or npf support? I can at least come up with this faster than rewriting gnunet-service-dns into a dns server.

Part of the original issue has been worked around iirc (not compiling on FreeBSD) but someone would have to test it (me, as soon as replacement parts for my server arrive).

The issue of this not working on *BSD remains.

Christian Grothoff

2019-09-10 11:34

manager   ~0014880

Sure, pf/npf support would be great. (Note: no relationship to Taler here, though).

nikita

2019-09-11 12:04

reporter   ~0014883

This file will also fail with system which do not provide the binary "ip", which also includes the majority of the BSD Operating Systems.

nikita

2019-09-12 23:23

reporter   ~0014895

As a sidenote for myself and reference - there seems to be a (slow) move to replace iptables with BPF: https://cilium.io/blog/2018/04/17/why-is-the-kernel-community-replacing-iptables/

Issue History

Date ModifiedUsernameFieldChange
2016-06-17 18:13lynXNew Issue
2016-08-03 09:50Christian GrothoffNote Added: 0011000
2017-02-26 00:41Christian GrothoffSeverityblock => feature
2019-03-21 13:24nikitaNote Added: 0014230
2019-03-21 13:24nikitaAssigned To => Christian Grothoff
2019-03-21 13:24nikitaStatusnew => feedback
2019-04-05 21:13Christian GrothoffNote Added: 0014259
2019-09-04 05:04Christian GrothoffAssigned ToChristian Grothoff =>
2019-09-04 05:04Christian GrothoffStatusfeedback => acknowledged
2019-09-10 08:38nikitaNote Added: 0014879
2019-09-10 08:39nikitaNote Edited: 0014879
2019-09-10 08:40nikitaNote Edited: 0014879
2019-09-10 11:34Christian GrothoffNote Added: 0014880
2019-09-11 12:04nikitaNote Added: 0014883
2019-09-11 12:04nikitaAssigned To => nikita
2019-09-11 12:04nikitaStatusacknowledged => assigned
2019-09-12 23:23nikitaNote Added: 0014895
2020-10-29 09:15schanzenTarget Version => 0.15.0
2021-06-10 17:36schanzenTarget Version0.15.0 => 0.16.0
2021-12-31 08:29schanzenTarget Version0.16.0 => 0.17.0
2021-12-31 08:32schanzenTarget Version0.17.0 => 1.0.0
2021-12-31 08:36schanzenTarget Version1.0.0 => 0.17.0
2021-12-31 08:37schanzenAssigned Tonikita =>
2022-06-04 21:13schanzenTarget Version0.17.0 => 0.18.0
2022-10-22 13:13schanzenTarget Version0.18.0 => 1.0.0