[nos-bbs] Raspberry Pi Jnos Telnet from another PC problem

[Jose Ng Lee]

Thank you Bill for your information about UFW.

Will look for another simple Firewall.

73s Jose / HP2AT
  ----- Original Message ----- 
  From: Wm Lewis 
  To: Jose Ng Lee 
  Sent: Tuesday, January 28, 2014 10:47 PM
  Subject: RE: [nos-bbs] Raspberry Pi Jnos Telnet from another PC problem


  Just an FYI to all who use UFW (Uncomplicated Firewall)......
   
  On one of my older machines, it works great.....
   
  On my brand new top of the line machine, UFW HATES "PROTO=4" and tries to block it. 
   
  The biggest issue is that UFW was built with only a few "PROTO=...." rules and PROTO 4 was not one of them. 
   
  So, there is no known way (at least that I could find) to issue a rule in UFW like "UFW ALLOW PROTO=4".  It just isn't possible.  Which really sucks, because UFW is very uncomplicated in all other aspects.
   
  Bill
  KG6BAJ


------------------------------------------------------------------------------
  From: hp2cwb at cwpanama.net
  To: nos-bbs at tapr.org
  Date: Tue, 28 Jan 2014 21:28:15 -0500
  Subject: Re: [nos-bbs] Raspberry Pi Jnos Telnet from another PC problem


  I found the solution to my problem.

  I disable the firewall ufw and is forwarding the IP and be able to telnet from another PC.

  I used ufw because is a simple firewall and have this rules:

  To                         Action      From
  --                         ------      ----
  80/tcp                     ALLOW       Anywhere
  22/tcp                     ALLOW       Anywhere
  10000/tcp                  ALLOW       Anywhere
  443/tcp                    ALLOW       Anywhere
  6300/tcp                   ALLOW       Anywhere
  7300/tcp                   ALLOW       Anywhere
  21/tcp                     ALLOW       Anywhere
  23/tcp                     ALLOW       Anywhere
  3286/tcp                   ALLOW       Anywhere
  8000/tcp                   ALLOW       Anywhere
  10092                      ALLOW       Anywhere
  10094                      ALLOW       Anywhere
  10093                      ALLOW       Anywhere
  10095                      ALLOW       Anywhere
  14580                      ALLOW       Anywhere
  14501                      ALLOW       Anywhere

  Now have to figure out how to write the rule for the ufw to not block the tun0 IP forwarding.

  On my Full size PC with Ubuntu using a more complicated Shoreline Firewall.

  73s Jose / HP2AT
    ----- Original Message ----- 
    From: Bob Tenty 
    To: nos-bbs at tapr.org 
    Sent: Monday, January 27, 2014 3:58 PM
    Subject: Re: [nos-bbs] Raspberry Pi Jnos Telnet from another PC problem


    To narrow it down you can use "tcpdump" at the interface from the kernel to jnos and the ipip interface
    to see which one what is not passing the traffic.

    73,

    Bob VE3TOK


    On 14-01-27 11:35 AM, Jose Ng Lee wrote:

      I am using the F6BVP Raspbian image preinstalled with AX.25 and FBB, DXSpider, and FPAC working OK.

      Uploaded the Jnos 2.0j and tried also 2.0jx4 sources to the Pi and compiled OK both jnos executable.

      My problem is that I am not able to Telnet directly to the JNOS in the Raspberry PI from a PC.

      I am able from the PC to Telnet first to the Linux side on the Raspberry Pi and then to the JNOS.

      On my Full size PC with Ubuntu and JNOS, I can Telnet OK from a PC directly to JNOS.  I copy the autoexec.nos from my PC Ubuntu JNOS to the Raspberry Pi and changed some lines with the different IPs, etc..

      On Jnos side, the tun0 is setup as usual:

      # NOS creates the TUN device, so NOS needs to do a postcofig
      shell ifconfig tun0 200.46.129.25 pointopoint 200.46.129.26 mtu 1500 up
      pause 5
      #
      shell arp -s 200.46.129.26 b8:27:eb:e1:b2:ee pub
      #

      The ax25-up script already do:
      echo 1 > /proc/sys/net/ipv4/ip_forward

      Also, later checked and did "more ip_forward" and has the "1".

      Checked from both the PC Ubuntu Jnos and Raspberry pi Jnos, With Webmin the network interfaces, routes, hostnames.  Also, checked on the command line from both machines de ARP and it looks OK for both.

      Tried other things with no luck.  Looks like the RPI not able to do the IP to IP forwarding through the tun0 from an outside PC Telnet connection.

      Has anyone got their Raspberry Pi with Jnos setup right and be able to Telnet directly from a PC.

      73s Jose / HP2AT

       

_______________________________________________
nos-bbs mailing list
nos-bbs at tapr.org
http://www.tapr.org/mailman/listinfo/nos-bbs


----------------------------------------------------------------------------


    _______________________________________________
    nos-bbs mailing list
    nos-bbs at tapr.org
    http://www.tapr.org/mailman/listinfo/nos-bbs



  _______________________________________________ nos-bbs mailing list nos-bbs at tapr.org http://www.tapr.org/mailman/listinfo/nos-bbs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.tapr.org/pipermail/nos-bbs_lists.tapr.org/attachments/20140129/179a99ee/attachment.html>