Hello all, first of all i want to thank the community for all the great manuals and documentation about the bubba devices! Its great what one can do with them
What i want:
Bubba2 as a bridge acting as a hardware firewall isolating a network segment (LAN) by only enabling communication to certain hosts on the other segment (WAN). Its not about much traffic, but about reachability. Currently my idea is based on usage of iptables with NAT on the bubba2 between the segments. Probably another solution exists without NAT just mirrorring traffic of one port to the otherone, but for the main topic i would like to stick getting NAT working in the current configuration.
What i have:
I installed b2-install-1.2.zip on the bubba2 and followed the guide on viewtopic.php?f=11&t=2518#p11869 to reach a debian squeeze system, which i then upgraded to wheezy and now jessie currently with sources.list:
Code: Select all
deb http://repo.excito.org jessie main
deb-src http://repo.excito.org jessie main
deb http://ftp.debian.org/debian/ jessie main
deb http://security.debian.org/ jessie/updates main contrib non-freeLinux bubba 3.18.24-1 #1 Thu Nov 19 23:29:50 EST 2015 ppc GNU/Linux
So far the bubba2 seems to work great!
Then i tried to configure iptables with NAT, but the kernel seems not to support it:
Code: Select all
$ iptables --table nat --flush
iptables v1.4.21: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
$ modprobe iptable_nat
modprobe: FATAL: Module iptable_nat not found.
$ modprobe nf_nat
modprobe: FATAL: Module nf_nat not found.
$ modprobe nf_conntrack_ipv4
$ modprobe nf_conntrack
Code: Select all
$ ls /lib/modules/3.18.24-1/kernel/net/ipv4/netfilter/
arptable_filter.ko iptable_filter.ko ip_tables.ko ipt_ECN.ko nf_defrag_ipv4.ko
arp_tables.ko iptable_mangle.ko ipt_ah.ko ipt_REJECT.ko nf_reject_ipv4.ko
arpt_mangle.ko iptable_raw.ko ipt_CLUSTERIP.ko nf_conntrack_ipv4.kohttp://wiki.excito.com/w/index.php?titl ... _on_the_B3
(same http://www.splitbrain.org/blog/2010-11/ ... _on_the_b3)
Code: Select all
$ apt-get source bubba3-kernel
#which is downloading linux_3.18.24.orig.tar.gz, linux_3.18.24-1.dsc, and linux_3.18.24-1.debian.tar.xz from http://repo.excito.org/pool/main/l/linux/
$ cd linux-3.18.24
$ cp -pr arch/powerpc/configs/bubbatwo_defconfig .config
$ make menuconfig
Exit & Save..config - Linux/powerpc 3.18.24 Kernel Configuration
[*] Networking support ---> Networking options ---> [*] Network packet filtering framework (Netfilter) ---> IP: Netfilter Configuration --->
<M> iptables NAT support (NEW)
<M> MASQUERADE target support (NEW)
<M> NETMAP target support
<M> REDIRECT target support
(<M> IPv4 NAT)
(<M> IPv4 masquerade support )
Code: Select all
$ make modules
...
LD [M] lib/zlib_deflate/zlib_deflate.o
Building modules, stage 2.
MODPOST 456 modules
CC crypto/ansi_cprng.mod.o
LD [M] crypto/ansi_cprng.ko
ld: cannot find arch/powerpc/lib/crtsavres.o: No such file or directory
scripts/Makefile.modpost:124: recipe for target 'crypto/ansi_cprng.ko' failed
make[1]: *** [crypto/ansi_cprng.ko] Error 1
Makefile:1099: recipe for target 'modules' failed
make: *** [modules] Error 2leaned on https://askubuntu.com/questions/168279/ ... ule#338403
Code: Select all
$ make SUBDIR=net/netfilter modules
CHK include/config/kernel.release
CHK include/generated/uapi/linux/version.h
CHK include/generated/utsrelease.h
CALL scripts/checksyscalls.sh
Building modules, stage 2.
MODPOST 455 modules
LD [M] crypto/anubis.ko
ld: cannot find arch/powerpc/lib/crtsavres.o: No such file or directory
scripts/Makefile.modpost:124: recipe for target 'crypto/anubis.ko' failed
make[1]: *** [crypto/anubis.ko] Error 1
Makefile:1099: recipe for target 'modules' failed
make: *** [modules] Error 2Sorry for the help request, im not very good in kernel compilage and have no clue how to analyze further due to not understanding usage of the recipes :-/
