Messages

1

General Questions / Trouble with IPv6

« on: August 02, 2017, 04:01:49 PM »

Hey Andy!  I recommended t1n1wall to one of my users for support for his apu, and it is working for him but...  When he enables IPv6, it all goes sideways.  He tried to post but was having trouble signing up.  His thread is here.  http://smallwall.freeforums.net/thread/148/apu2c4  and his problem follows.

-----

So I finally managed, after an arduous process, to get t1n1wall running on the APU2c4. Only one tiny problem so far, besides cosmetics (icon beside DHCP leases to add to reservations is missing, tho the link works). Here's the only major problem today for 2.11.1b140 built on Sat Feb 18 18:30:49 GMT 2017:

Can't enable IP6 - doing so locks up t1n1wall and I have to reset everything via the console and restore saved configuration. I've tried straight from initial configuration with no configurations other than out of box and still no go.

Enable IPv6 support
After enabling IPv6 support, configure IPv6 addresses on your LAN and WAN interfaces, then add IPv6 firewall rules.
Note: you must set an IPv6 address on the LAN interface for the IPv6 support to work.

Of course I had IP6 enabled on SmallWall 1.8.4b11 built on Thu Jun 23 17:11:56 CDT 2016 without problem. Here's t1n1wall 2.11.1b140 built on Sat Feb 18 18:30:49 GMT 2017 status.php - interfaces section:

igb0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=6403fb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,POLLING,VLAN_HWCSUM,TSO4,TSO6,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
ether 00:0d:b9:46:3d:a8
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::20d:b9ff:fe46:3da8%igb0 prefixlen 64 scopeid 0x1
nd6 options=61<PERFORMNUD,AUTO_LINKLOCAL,NO_RADR>
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
igb1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=6403fb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,POLLING,VLAN_HWCSUM,TSO4,TSO6,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
ether 00:0d:b9:46:3d:a9
inet6 fe80::20d:b9ff:fe46:3da9%igb1 prefixlen 64 scopeid 0x2
inet x.x.x.x netmask 0xfffffe00 broadcast 255.255.255.255
nd6 options=61<PERFORMNUD,AUTO_LINKLOCAL,NO_RADR>
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
igb2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=6403fb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,POLLING,VLAN_HWCSUM,TSO4,TSO6,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
ether 00:0d:b9:46:3d:aa
inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255
inet6 fe80::20d:b9ff:fe46:3daa%igb2 prefixlen 64 scopeid 0x3
nd6 options=61<PERFORMNUD,AUTO_LINKLOCAL,NO_RADR>
media: Ethernet autoselect (1000baseT <full-duplex>)
status: active
enc0: flags=41<UP,RUNNING> metric 0 mtu 1536
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
groups: enc
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
groups: lo
pflog0: flags=100<PROMISC> metric 0 mtu 33184
groups: pflog


Would have posted on t1n1wall forum, but registering to post there doesn't seem to be working atm...so here I am. Need to be pointed in the right direction to help diagnose/enable IP6.

Thanks to your previous help I've gotten this far...just about there.

2

Services / Re: how to do this?

« on: September 07, 2016, 07:51:50 PM »

Then you should get a captive portal.  This is not the proper tool for what you need.  It is like buying a car for an adjustable seat.

3

General Questions / Re: using t1n1wall for just a captive portal?

« on: September 07, 2016, 07:49:53 PM »

It has an entire operating system firewall and web server it depends on.  I can not think of a way to strip it out...

4

General Questions / Re: Bug Status-Interfaces-WAN interface

« on: September 07, 2016, 07:48:46 PM »

Sorry for the lack of response, but I have no access to PPPoE and no way to reproduce...

5

General Questions / Re: Bug Status-Interfaces-WAN interface

« on: July 25, 2016, 05:03:09 PM »

What version are you running, and what form is the WAN link?  (DHCP?  PPPoE?)

6

General Questions / Re: net6501 upgrade to 1.10.2b102 broken

« on: July 25, 2016, 05:01:20 PM »

It looks like you are trying to boot off a USB Cruzer flash disk.  And it looks like it may be having read errors.  Try another thumb drive.

7

Security / Re: Security update r68

« on: November 02, 2015, 06:26:00 PM »

That mini_httpd update came out, literally, one week after I checked to see what software needed updating.    Sigh...

8

Installation / Re: What are the system requirements?

« on: October 26, 2015, 07:58:04 PM »

t1n1wal is m0n0wall with some new patched.  The 1.8 series is just a continuation, while the 1.10 series is much more updated, and still beta.  If you have m0n0wall 1.81 install, you can just update the image.  If you have 1.34 installed, you need 1.34a to update.

Some instruction is here for SmallWall, which is also very similar.
http://www.smallwall.org/docs/qsg-update.html

And some discussion on the versions needed here.
http://smallwall.freeforums.net/thread/28/m0n0wall-smallwall-migration

Note that t1n1wall 1.8 installs in the same way as SmallWal right now.

9

General Questions / What dyn-dns do you use?

« on: October 23, 2015, 03:24:17 PM »

I am working on updating EZ-IPupdate to support modern providers.  (Like no-ip which I use)  So what is everyone using?  And what custom settings are you using to do it, or how are you doing it if not with t1n1wall?

Something like...

No-IP
Service Type = DynDNS (Custpom)
Server = dynupdate.no-ip.com

Or,

DNSomatic
/usr/bin/fetch --no-verify-peer "https://username:[email protected]/nic/update?hostname=dyndnsname" > /tmp/error.log

10

Services / Re: Anyone using mobile IPsec?

« on: September 21, 2015, 04:20:48 PM »

I will encourage the people with the problem on SmallWall to come over to this thread and to try your image.

11

Services / Re: Anyone using mobile IPsec?

« on: September 18, 2015, 03:11:44 AM »

I have a report of it failing under Aggressive as well.

http://smallwall.freeforums.net/thread/71/mobile-vpn-thegreenbow-smallwall

12

Feature Requests / Re: Add GUI to manage Multilink PPPoE

« on: September 14, 2015, 05:48:44 PM »

If you want to work on it, we are still doing active development on the 8.4 series while Andy focuses on 10...  (And offering our changes to t1n1wall as well)  You can look at the SmallWall development documentation and work with that.  Anything developed should be easy to port back to t1n1wall as well.  And I bet Andy would prefer proven patches to developing it himself.

13

Feature Requests / Re: SNMP Agent Upgrade to 64bit

« on: September 14, 2015, 05:43:55 PM »

Glad to help! We both need all we can get.

14

Services / Re: Anyone using mobile IPsec?

« on: September 02, 2015, 10:41:49 PM »

Frankly, I do not see a big reason to fix.  L2tp is a functional replacement for Mobile IPsec, and it is MUCH better supported.  I just need better documentation to say that you have to choose one or the other and configure IPSEC accordingly.

15

Feature Requests / Re: VMware Tools Installation

« on: September 01, 2015, 05:43:27 PM »

Not a bad plan.  Besides, any fixes I get for 1.8 you can port over to t1n1wall...  I am looking at upgrading some of the older packages we still use.   I will look at your patches, and see about backporting them.  I have been working on hyper-v, but the 8.x series drivers have some...  Issues...