Íàñòðîéêà iodine íà ðîóòåðå Asus

Ïðåäûñòîðèÿ íàãóãëèë òàêóþ øòóêó http://www.3dnews.ru/workshop/608756/print
Çàõîòåë ñåáå.
Çà÷åì - ïðèõîäèòñÿ êàòàòüñÿ ïî çàãðàíèöàì ãäå åñòü ìíîãî wifi ñ îòêðûòûì DNS è íåò äåíåã :(.
IP - ñòàòèêà, ñîåäèíåíèå - Ethernet ðîóòåð 500gp ïðîøèâêà ýòóçèàñòîâ.
Ñîáðàë íà ðîóòåðå ïîñëåäíþþ âåðñèþ iodine (Ip ïîâåðõ DNS).
×òî ñäåëàíî - ñîáðàí iodine ðàçðåøåí dns:
iptables -I INPUT -i vlan1 -o dns0 -j ACCEPT
 êà÷åñòâå êëèåíòà W7x64 íà íåòáóêå
Òîííåëü ïîäíèìàåòñÿ, íîóò ïèíãóåò àéïè íà èíòåðôåéñå dns0.
Çàäà÷à íàñòðîèòü NAT.
Óæå ÷àñîâ 5 êàê çàñòðÿë íà ýòîì ìîìåíòå, ìîÿ ïðîáëåìà â íåïîíèìàíèè ëîãèêè ðàáîòû Iptables, opennet êóðèë, ïîêà íå äîõîäèò.
Ëîãè ìîãó äàòü ïî çàïðîñó.
Ïðîøó ïîìîùè.

Quote:

---

Originally Posted by Èãîðü

Ïðåäûñòîðèÿ íàãóãëèë òàêóþ øòóêó http://www.3dnews.ru/workshop/608756/print
Çàõîòåë ñåáå.
Çà÷åì - ïðèõîäèòñÿ êàòàòüñÿ ïî çàãðàíèöàì ãäå åñòü ìíîãî wifi ñ îòêðûòûì DNS è íåò äåíåã :(.
IP - ñòàòèêà, ñîåäèíåíèå - Ethernet ðîóòåð 500gp ïðîøèâêà ýòóçèàñòîâ.
Ñîáðàë íà ðîóòåðå ïîñëåäíþþ âåðñèþ iodine (Ip ïîâåðõ DNS).
×òî ñäåëàíî - ñîáðàí iodine ðàçðåøåí dns:
iptables -I INPUT -i vlan1 -o dns0 -j ACCEPT
 êà÷åñòâå êëèåíòà W7x64 íà íåòáóêå
Òîííåëü ïîäíèìàåòñÿ, íîóò ïèíãóåò àéïè íà èíòåðôåéñå dns0.
Çàäà÷à íàñòðîèòü NAT.
Óæå ÷àñîâ 5 êàê çàñòðÿë íà ýòîì ìîìåíòå, ìîÿ ïðîáëåìà â íåïîíèìàíèè ëîãèêè ðàáîòû Iptables, opennet êóðèë, ïîêà íå äîõîäèò.
Ëîãè ìîãó äàòü ïî çàïðîñó.
Ïðîøó ïîìîùè.

---

Ïðàâèëüíî ëè ÿ ïîíÿë, ÷òî äàëüøå wl500 ïàêåòû íå èäóò?
Ìá. ïðîñòî äîáàâèòü äàííûé èíòåðôåéñ (dns0) â ñåòåâîé ìîñò íà àñóñå ïîñëå åãî ïîäíÿòèÿ?

Code:

---

brctl addif br0 dns0
ifconfig dns0 0.0.0.0 promisc up

---

Quote:

---

Originally Posted by MMX2

Ïðàâèëüíî ëè ÿ ïîíÿë, ÷òî äàëüøå wl500 ïàêåòû íå èäóò?

---

Âåðíî, êëèåíò âèäèò òîëüêî îêîí÷àíèå òîííåëÿ íà ñòîðîíå ðîóòåðà, êîãäà ÿ íàñòðàèâàë poptop äëÿ äîñòóïà â ñâîþ ñåòü òàì áûëè ip-up ip-down çäåñü òàêîãî íåò.

Quote:

---

Originally Posted by MMX2

Ìá. ïðîñòî äîáàâèòü äàííûé èíòåðôåéñ (dns0) â ñåòåâîé ìîñò íà àñóñå ïîñëå åãî ïîäíÿòèÿ?

Code:

---

brctl addif br0 dns0
ifconfig dns0 0.0.0.0 promisc up

---

---

brctl addif br0 dns0
can't add dns0 to bridge br0: Invalid argument
Íåïîøëî

Quote:

---

Originally Posted by Èãîðü

Âåðíî, êëèåíò âèäèò òîëüêî îêîí÷àíèå òîííåëÿ íà ñòîðîíå ðîóòåðà, êîãäà ÿ íàñòðàèâàë poptop äëÿ äîñòóïà â ñâîþ ñåòü òàì áûëè ip-up ip-down çäåñü òàêîãî íåò.

brctl addif br0 dns0
can't add dns0 to bridge br0: Invalid argument
Íåïîøëî

---

Õìì, à åñëè åãî ñáðèäæåâàòü äî ïîäêëþ÷åíèÿ êëèåíòà? Èëè òîãäà èíòåðôåéñ åùå íå ïîäíÿò? Ñåé÷àñ ãóðó íàáåãóò - ïîìîãóò:)

Ðàçîáðàëñÿ. Âñå äåëî â ïîðÿäêå ïðàâèë, åñëè êëþ÷ ñòàâèòü -I âìåñòî -A òî âñå ðàáîòàåò.
iptables -I FORWARD -i dns0 -o vlan1 -j ACCEPT
Äîáàâèë iodine
Attachment 9075

ïîäñêàæèòå, êàê çàðóëèòü íà 53 ïîðò ðîóòåðà (ò.å. íà dnsmasq) âñå çàïðîñû êëèåíòñêèõ ìàøèí îòïðàâëåííûå íà âíåøíèå DNS ñåðâåðà (53 ïîðò)?
(åñòåñòâåííî ó ñàìîãî dnsmasq íà ðîóòåðå äîëæåí îñòàòüñÿ äîñòóï ê âíåøíèì DNS, èíà÷å äîìåíû íå áóäóò ðåçîëâèòñÿ)

Ïîïðîáóéòå â post-firewall âïèñàòü:

Code:

---

iptables -t nat -A PREROUTING -i $3 -p udp --dport 53 -j DNAT --to-destination $4

---

à åñëè ñ êîìàíäíîé ñòðîêè çàïóñêàòü (âðó÷íóþ, ïîêà íå àâòîìàòèçèðóÿ ÷åðåç post-firewall), òî ÷òî íà ìåñòå $3 è $4 óêàçûâàåòñÿ?

Quote:

---

Originally Posted by bmenee

à åñëè ñ êîìàíäíîé ñòðîêè çàïóñêàòü (âðó÷íóþ, ïîêà íå àâòîìàòèçèðóÿ ÷åðåç post-firewall), òî ÷òî íà ìåñòå $3 è $4 óêàçûâàåòñÿ?

---

ñìûñë àðãóìåíòîâ post-firewall
ïîñìîòðåòü çíà÷åíèÿ àðãóìåíòîâ ìîæíî äîáàâèâ â post-firewall ñòðîêó

Code:

---

echo "$0 $1 $2 $3 $4 $5 $6" > /tmp/post-firewall.log

---

Äîáðîãî âðåìåíè ñóòîê âñåì â ýòîé òåìå.
Ïîäñêàæèòå áûñòðûé ïóòü äëÿ ëåíòÿåâ âîòêíóòü íà ýòîò ðîóòåð iodine, ìîæåò åñòü êàêèå ïðîøèâêè ñ ñàáæåì èëè êîìïèëÿòîð êàê-òî ìîæíî ïîñòàâèòü íà êîðîáêó, ÿ ÷àéíèê, êðîñêîìïèëèðîâàíèå - ÷åðíàÿ ìàãèÿ äëÿ ìåíÿ.
Ñòîÿëî iodine íà 500gpv1 íî îí óìåð, âîò îáíîâèëñÿ è õîòåëîñü áû áåç óòðàòû ïðèâû÷íûõ ôóíêöèé.

Quote:

---

Originally Posted by Èãîðü

Äîáðîãî âðåìåíè ñóòîê âñåì â ýòîé òåìå.
Ïîäñêàæèòå áûñòðûé ïóòü äëÿ ëåíòÿåâ âîòêíóòü íà ýòîò ðîóòåð iodine, ìîæåò åñòü êàêèå ïðîøèâêè ñ ñàáæåì èëè êîìïèëÿòîð êàê-òî ìîæíî ïîñòàâèòü íà êîðîáêó, ÿ ÷àéíèê, êðîñêîìïèëèðîâàíèå - ÷åðíàÿ ìàãèÿ äëÿ ìåíÿ.
Ñòîÿëî iodine íà 500gpv1 íî îí óìåð, âîò îáíîâèëñÿ è õîòåëîñü áû áåç óòðàòû ïðèâû÷íûõ ôóíêöèé.

---

http://asuswrt.lostrealm.ca/download

Quote:

---

Originally Posted by Èãîðü

Äîáðîãî âðåìåíè ñóòîê âñåì â ýòîé òåìå.
Ïîäñêàæèòå áûñòðûé ïóòü äëÿ ëåíòÿåâ âîòêíóòü íà ýòîò ðîóòåð iodine, ìîæåò åñòü êàêèå ïðîøèâêè ñ ñàáæåì
èëè êîìïèëÿòîð êàê-òî ìîæíî ïîñòàâèòü íà êîðîáêó, ÿ ÷àéíèê, êðîñêîìïèëèðîâàíèå - ÷åðíàÿ ìàãèÿ äëÿ ìåíÿ.
Ñòîÿëî iodine íà 500gpv1 íî îí óìåð, âîò îáíîâèëñÿ è õîòåëîñü áû áåç óòðàòû ïðèâû÷íûõ ôóíêöèé.

---

Ìîæíî óñòàíîâèòü Entware iodine 0.7.0-1 :)
http://habrahabr.ru/post/129097/ ;)

òàêàÿ áåäà.
îáíîâèëñÿ íà 380.57
ïîñòàâèë https://github.com/RMerl/asuswrt-merlin/wiki/Entware íà âíåøíèé æåòñêèé äèñê 3 ðàçäåëà 1 swap 2G 2 Entware 4G 3 Torrent âñå îñòàëüíîå
Entware ñòàâèë íà âòîðîé ðàçäåë
ïîñòàâèë mc iodine çàïóñòèë âñå áåãàåò
ïîñëå ïåðåçàãðóçêè JFFS - ïóñòîé.
ãàëêó â íàñòðîéêàõ ñòàâèë/óáèðàë
÷òî ÿ äåëàþ íå òàê?