[Lugro-mesh] Re: Achicando imagen

Gustavo Lindberg lugro-mesh@lugro.org.ar
Tue, 18 Dec 2007 22:18:28 -0300


------=_Part_16646_19595081.1198027108882
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Que es el coova y por que ???

2007/12/18, Sebasti=E1n D. Criado <scriado@ciudad.com.ar>:
>
>
> El mar, 18-12-2007 a las 20:26 -0300, Gustavo Lindberg escribi=F3:
> > Y lo importante, carga el modulo teniendo el TC ???
> >
>
>
> Ups jeje, me olvide lo importante. :D
>
> Si, as=ED es, con el tc instalado, salio andando, eso si, tambi=E9n he
> tenido que instalar el kmod-imq
>
> Comento lo que paso paso a paso:
>
>
> Despu=E9s de esto el nodogspash tiro otros errores, que me pararon por
> rato:
>
> /etc/init.d/nodogsplash restart
> nodogsplash: Stopping nodogsplash ...
> nodogsplash: I was not running
> nodogsplash: Starting nodogsplash ...
> Testing module ipt_mac
>   ipt_mac is working
> Testing module ipt_mark
>   ipt_mark is working
> Testing module ipt_REDIRECT
>   ipt_REDIRECT is working
> Testing module imq
>   imq is working
> Testing module ipt_IMQ
>   ipt_IMQ is working
> Testing module sch_htb
>   Module sch_htb  not working
>   Scanning disk for sch_htb module
>   sch_htb exists, trying to load
>   sch_htb  loaded successfully
> nodogsplash: started
> ~ $ iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:46 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t nat -A ndsOUT -m mark --mark 0xf -j
> ACCEPT
> iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:46 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t nat -A ndsOUT -m mark --mark 0xd -j
> ACCEPT
> iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:47 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t filter -A ndsRTR -m mark --mark 0xe
> -j DROP
> iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:47 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t filter -A ndsRTR -m mark --mark 0xf
> -j ACCEPT
> iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:48 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t filter -A ndsNET -m mark --mark 0xe
> -j DROP
> iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:48 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t filter -A ndsNET -m mark --mark 0xf
> -j ACCEPT
> iptables v1.3.8: Couldn't load match `mark':File not found
>
> Try `iptables -h' or 'iptables --help' for more information.
> [3][Sat Jan  1 00:09:48 2000][2429](fw_iptables.c:85) Nonzero exit
> status 2 from command: iptables -t filter -A ndsNET -m mark --mark 0xd
> -j ndsAUT
> [3][Sat Jan  1 00:09:48 2000][2429](gateway.c:418) Error initializing
> firewall rules! Cleaning up
> [3][Sat Jan  1 00:09:51 2000][2429](gateway.c:420) Exiting because of
> error initializing firewall rules
>
> Prob=E9 instalando los
>
> iptables-mod-extra_1.3.8-2_mips.ipk
> kmod-ipt-extra_2.6.23.1-atheros-1_mips.ipk
>
> Pero sigui=F3 igual.
>
> Cre=ED que el problema ven=EDa por el tema de QoS, as=ED que me puse a
> compilar e instalar QoS que es de donde va a sacar el mark.
>
> Este modulo requiere los siguientes paquetes:
>
> iptables-mod-filter
> iptables-mod-ipopt
> kmod-ipt-filter
> kmod-ipt-ipopt
>
> Cuando termine de instalar estos ultimos m=F3dulos, y sin haber instalado
> los script de QoS, salio andando el nodogsplash.
>
> Resultado, el siguiente:
>
> /etc/init.d/nodogsplash restart
> nodogsplash: Stopping nodogsplash ...
> nodogsplash: I was not running
> nodogsplash: Starting nodogsplash ...
> Testing module ipt_mac
>   ipt_mac is working
> Testing module ipt_mark
>   ipt_mark is working
> Testing module ipt_REDIRECT
>   ipt_REDIRECT is working
> Testing module imq
>   imq is working
> Testing module ipt_IMQ
>   ipt_IMQ is working
> Testing module sch_htb
>   Module sch_htb  not working
>   Scanning disk for sch_htb module
>   sch_htb exists, trying to load
>   sch_htb  loaded successfully
> nodogsplash: started
> root@robin:~$ iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> ndsRTR     all  --  anywhere             anywhere
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> ndsNET     all  --  anywhere             anywhere
> DROP       all  --  anywhere            !xxxxxxxxxxx.org
> DROP       all  --  anywhere            !xxxxxxxxxxx.org
> #### Interesante esta linea, por que resolvi=F3 cual era el gateway.
>
>
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain ndsAUT (1 references)
> target     prot opt source               destination
> ACCEPT     all  --  anywhere             anywhere            state
> RELATED,ESTABLISHED
> REJECT     all  --  anywhere             10.0.0.0/8          reject-with
> icmp-port-unreachable
> ACCEPT     all  --  anywhere             anywhere
> REJECT     all  --  anywhere             anywhere            reject-with
> icmp-port-unreachable
>
> Chain ndsNET (1 references)
> target     prot opt source               destination
> DROP       all  --  anywhere             anywhere            MARK match
> 0xe
> DROP       all  --  anywhere             anywhere            state
> INVALID
> TCPMSS     tcp  --  anywhere             anywhere            tcp
> flags:SYN,RST/SYN TCPMSS clamp to PMTU
> ACCEPT     all  --  anywhere             anywhere            MARK match
> 0xf
> ndsAUT     all  --  anywhere             anywhere            MARK match
> 0xd
> REJECT     all  --  anywhere             10.0.0.0/8          reject-with
> icmp-port-unreachable
> ACCEPT     all  --  anywhere             anywhere
> REJECT     all  --  anywhere             anywhere            reject-with
> icmp-port-unreachable
>
> Chain ndsRTR (1 references)
> target     prot opt source               destination
> DROP       all  --  anywhere             anywhere            MARK match
> 0xe
> DROP       all  --  anywhere             anywhere            state
> INVALID
> ACCEPT     all  --  anywhere             anywhere            state
> RELATED,ESTABLISHED
> DROP       tcp  --  anywhere             anywhere            tcp
> option=3D!2 flags:SYN/SYN
> ACCEPT     all  --  anywhere             anywhere            MARK match
> 0xf
> ACCEPT     tcp  --  anywhere             anywhere            tcp
> dpt:2050
> ACCEPT     udp  --  anywhere             anywhere            udp dpt:53
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:53
> ACCEPT     udp  --  anywhere             anywhere            udp dpt:67
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:20
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:21
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:22
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:23
> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:80
> ACCEPT     tcp  --  anywhere             anywhere            tcp
> dpt:443
> REJECT     all  --  anywhere             anywhere            reject-with
> icmp-port-unreachable
>
>
>
> Y si recuerdan los errores que tiraba antes, miren
>
> IPP2P v0.8.1_rc1 loading
> IMQ starting with 2 devices...
> IMQ driver loaded successfully.
>         Hooking IMQ before NAT on PREROUTING.
>         Hooking IMQ after NAT on POSTROUTING.
>
>
> Luego de que esto anduviera, instale el dnsmasq (ya me estoy quedando
> con poco libre)
> y quedo andando as=ED:
>
> ps ax
>   PID  Uid        VSZ Stat Command
>     1 root       2380 S   init
>     2 root            SW< [kthreadd]
>     3 root            SW< [ksoftirqd/0]
>     4 root            SW< [events/0]
>     5 root            SW< [khelper]
>    20 root            SW< [kblockd/0]
>    40 root            SW  [pdflush]
>    41 root            SW  [pdflush]
>    42 root            SW< [kswapd0]
>    43 root            SW< [aio/0]
>    87 root            SW< [mtdblockd]
>   256 root            SWN [jffs2_gcd_mtd2]
>   262 root       2380 S   logger -s -p 6 -t
>   263 root       2384 S   /bin/ash --login
>   271 root       2392 S   syslogd -C16
>   273 root       2372 S   klogd
>   281 root       1128 S   /sbin/hotplug2 --override --persistent
> --max-children
>   669 root       2380 S   httpd -p 80 -h /www -r OpenWrt
>   673 root       2376 S   telnetd -l /bin/ash
>   885 root       2380 S   /usr/sbin/httpd -p 8080 -h /www
> 1080 root       1404 S   hostapd -B /var/run/hostapd-ath2.conf
> 1122 root       1580 S   /usr/sbin/batmand -o 1500 -g 5000 -a
> 10.22.64.0/25 -a
> 1123 root       1580 S   /usr/sbin/batmand -o 1500 -g 5000 -a
> 10.22.64.0/25 -a
> 1125 root       1580 S   /usr/sbin/batmand -o 1500 -g 5000 -a
> 10.22.64.0/25 -a
> 1126 root       1580 S   /usr/sbin/batmand -o 1500 -g 5000 -a
> 10.22.64.0/25 -a
> 1156 nobody     1260 S   /usr/sbin/dnsmasq -C /etc/dnsmasq.ap.conf
> --bind-inte
> 1161 nobody     1260 S   /usr/sbin/dnsmasq -C /etc/dnsmasq.Myap.conf
> --bind-in
> 1165 root       2384 S   crond -c /etc/crontabs
> 1217 root       2112 S   /usr/bin/nodogsplash
> 1387 root       2112 S   /usr/bin/nodogsplash
> 1388 root       2112 S   /usr/bin/nodogsplash
> 1389 root       2112 S   /usr/bin/nodogsplash
>
>
> Por =FAltimo le instale el coova, por que si no, no sirve de nada el
> captive :D
>
> Pero no lo he hecho andar.
>
>
> ;)
> >
> --
> Sebasti=E1n D. Criado - scriado{en}ciudad.com.ar
> NO A LA MATRICULACI=D3N OBLIGATORIA -
> http://noalamatricula.wordpress.com/about/
> L.U.G.Ro - http://www.lugro.org.ar
> GNU/Linux Registered User # 146768
> -------------------------------------------------------------------
> "Si el Universo fuera un programa estar=EDa hecho en C, y correr=EDa sobr=
e
> un sistema UNIX"
>
>

------=_Part_16646_19595081.1198027108882
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Que es el coova y por que ???<br><br><div><span class=3D"gmail_quote">2007/=
12/18, Sebasti=E1n D. Criado &lt;<a href=3D"mailto:scriado@ciudad.com.ar">s=
criado@ciudad.com.ar</a>&gt;:</span><blockquote class=3D"gmail_quote" style=
=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; p=
adding-left: 1ex;">
<br>El mar, 18-12-2007 a las 20:26 -0300, Gustavo Lindberg escribi=F3:<br>&=
gt; Y lo importante, carga el modulo teniendo el TC ???<br>&gt;<br><br><br>=
Ups jeje, me olvide lo importante. :D<br><br>Si, as=ED es, con el tc instal=
ado, salio andando, eso si, tambi=E9n he
<br>tenido que instalar el kmod-imq<br><br>Comento lo que paso paso a paso:=
<br><br><br>Despu=E9s de esto el nodogspash tiro otros errores, que me para=
ron por<br>rato:<br><br>/etc/init.d/nodogsplash restart<br>nodogsplash: Sto=
pping nodogsplash ...
<br>nodogsplash: I was not running<br>nodogsplash: Starting nodogsplash ...=
<br> Testing module ipt_mac<br>&nbsp;&nbsp;ipt_mac is working<br> Testing m=
odule ipt_mark<br>&nbsp;&nbsp;ipt_mark is working<br> Testing module ipt_RE=
DIRECT<br>&nbsp;&nbsp;ipt_REDIRECT is working
<br> Testing module imq<br>&nbsp;&nbsp;imq is working<br> Testing module ip=
t_IMQ<br>&nbsp;&nbsp;ipt_IMQ is working<br> Testing module sch_htb<br>&nbsp=
;&nbsp;Module sch_htb&nbsp;&nbsp;not working<br>&nbsp;&nbsp;Scanning disk f=
or sch_htb module<br>&nbsp;&nbsp;sch_htb exists, trying to load
<br>&nbsp;&nbsp;sch_htb&nbsp;&nbsp;loaded successfully<br>nodogsplash: star=
ted<br>~ $ iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File not fou=
nd<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more infor=
mation.<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:46 2000][2429](fw_iptables.c:85) =
Nonzero exit
<br>status 2 from command: iptables -t nat -A ndsOUT -m mark --mark 0xf -j<=
br>ACCEPT<br>iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File not f=
ound<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more inf=
ormation.
<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:46 2000][2429](fw_iptables.c:85) Nonzero=
 exit<br>status 2 from command: iptables -t nat -A ndsOUT -m mark --mark 0x=
d -j<br>ACCEPT<br>iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File =
not found
<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more informa=
tion.<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:47 2000][2429](fw_iptables.c:85) No=
nzero exit<br>status 2 from command: iptables -t filter -A ndsRTR -m mark -=
-mark 0xe
<br>-j DROP<br>iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File not=
 found<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more i=
nformation.<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:47 2000][2429](fw_iptables.c:=
85) Nonzero exit
<br>status 2 from command: iptables -t filter -A ndsRTR -m mark --mark 0xf<=
br>-j ACCEPT<br>iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File no=
t found<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more =
information.
<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:48 2000][2429](fw_iptables.c:85) Nonzero=
 exit<br>status 2 from command: iptables -t filter -A ndsNET -m mark --mark=
 0xe<br>-j DROP<br>iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File=
 not found
<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more informa=
tion.<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:48 2000][2429](fw_iptables.c:85) No=
nzero exit<br>status 2 from command: iptables -t filter -A ndsNET -m mark -=
-mark 0xf
<br>-j ACCEPT<br>iptables v1.3.8: Couldn&#39;t load match `mark&#39;:File n=
ot found<br><br>Try `iptables -h&#39; or &#39;iptables --help&#39; for more=
 information.<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:48 2000][2429](fw_iptables.=
c:85) Nonzero exit
<br>status 2 from command: iptables -t filter -A ndsNET -m mark --mark 0xd<=
br>-j ndsAUT<br>[3][Sat Jan&nbsp;&nbsp;1 00:09:48 2000][2429](gateway.c:418=
) Error initializing<br>firewall rules! Cleaning up<br>[3][Sat Jan&nbsp;&nb=
sp;1 00:09:51 2000][2429](
gateway.c:420) Exiting because of<br>error initializing firewall rules<br><=
br>Prob=E9 instalando los<br><br>iptables-mod-extra_1.3.8-2_mips.ipk<br>kmo=
d-ipt-extra_2.6.23.1-atheros-1_mips.ipk<br><br>Pero sigui=F3 igual.<br><br>
Cre=ED que el problema ven=EDa por el tema de QoS, as=ED que me puse a<br>c=
ompilar e instalar QoS que es de donde va a sacar el mark.<br><br>Este modu=
lo requiere los siguientes paquetes:<br><br>iptables-mod-filter<br>iptables=
-mod-ipopt
<br>kmod-ipt-filter<br>kmod-ipt-ipopt<br><br>Cuando termine de instalar est=
os ultimos m=F3dulos, y sin haber instalado<br>los script de QoS, salio and=
ando el nodogsplash.<br><br>Resultado, el siguiente:<br><br>/etc/init.d/nod=
ogsplash restart
<br>nodogsplash: Stopping nodogsplash ...<br>nodogsplash: I was not running=
<br>nodogsplash: Starting nodogsplash ...<br> Testing module ipt_mac<br>&nb=
sp;&nbsp;ipt_mac is working<br> Testing module ipt_mark<br>&nbsp;&nbsp;ipt_=
mark is working<br>
 Testing module ipt_REDIRECT<br>&nbsp;&nbsp;ipt_REDIRECT is working<br> Tes=
ting module imq<br>&nbsp;&nbsp;imq is working<br> Testing module ipt_IMQ<br=
>&nbsp;&nbsp;ipt_IMQ is working<br> Testing module sch_htb<br>&nbsp;&nbsp;M=
odule sch_htb&nbsp;&nbsp;not working<br>&nbsp;&nbsp;Scanning disk for sch_h=
tb module
<br>&nbsp;&nbsp;sch_htb exists, trying to load<br>&nbsp;&nbsp;sch_htb&nbsp;=
&nbsp;loaded successfully<br>nodogsplash: started<br>root@robin:~$ iptables=
 -L<br>Chain INPUT (policy ACCEPT)<br>target&nbsp;&nbsp;&nbsp;&nbsp; prot o=
pt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp; destination<br>ndsRTR&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&=
nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp; anywhere
<br><br>Chain FORWARD (policy ACCEPT)<br>target&nbsp;&nbsp;&nbsp;&nbsp; pro=
t opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp; destination<br>ndsNET&nbsp;&nbsp;&nbsp;&nbsp; all&nbs=
p;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere<br>DROP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;!xxxxxxxxxxx.org<br>DROP&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;!xxxxxxxxxxx.or=
g
<br>#### Interesante esta linea, por que resolvi=F3 cual era el gateway.<br=
><br><br><br>Chain OUTPUT (policy ACCEPT)<br>target&nbsp;&nbsp;&nbsp;&nbsp;=
 prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp; destination<br><br>Chain ndsAUT (1 references)<br=
>target&nbsp;&nbsp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination
<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywh=
ere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
state<br>RELATED,ESTABLISHED<br>REJECT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nb=
sp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp; <a href=3D"http://10.0.0.0/8">10.0.0.0/8</a>&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;reject-with<br>icmp-por=
t-unreachable
<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywh=
ere<br>REJECT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; an=
ywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;reject-with<br>icmp-port-unreachable<br><br>Chain ndsNET (1 references)<=
br>target&nbsp;&nbsp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination
<br>DROP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;a=
nywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;MARK match<br>0xe<br>DROP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; all=
&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;state<br>INVALID<br>TCPMSS&nbsp;&nbsp;=
&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;tcp
<br>flags:SYN,RST/SYN TCPMSS clamp to PMTU<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp=
; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MARK match<br>0xf<br>ndsAUT&nbsp;=
&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MARK match<br>0x=
d<br>REJECT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
<a href=3D"http://10.0.0.0/8">10.0.0.0/8</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;reject-with<br>icmp-port-unreachable<br>ACCEPT=
&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere<br>REJ=
ECT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;reject-=
with<br>
icmp-port-unreachable<br><br>Chain ndsRTR (1 references)<br>target&nbsp;&nb=
sp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination<br>DROP&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MARK match<br=
>0xe<br>DROP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nb=
sp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;state
<br>INVALID<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;=
anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;state<br>RELATED,ESTABLISHED<br>DROP&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;tcp<br>option=3D!2 flags:S=
YN/SYN<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nbsp;anywh=
ere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
 anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;MARK match
<br>0xf<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;anyw=
here&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;tcp<br>dpt:2050<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; udp&nbsp;&nbsp;--&=
nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;udp dpt:53<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp=
;&nbsp;--&nbsp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;tcp dpt:53
<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; udp&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywh=
ere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
udp dpt:67<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;a=
nywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;tcp dpt:20<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nb=
sp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;tcp dpt:21
<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywh=
ere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
tcp dpt:22<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;a=
nywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;tcp dpt:23<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nb=
sp;&nbsp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;tcp dpt:80
<br>ACCEPT&nbsp;&nbsp;&nbsp;&nbsp; tcp&nbsp;&nbsp;--&nbsp;&nbsp;anywhere&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywh=
ere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
tcp<br>dpt:443<br>REJECT&nbsp;&nbsp;&nbsp;&nbsp; all&nbsp;&nbsp;--&nbsp;&nb=
sp;anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;reject-with<br>icmp-port-unreachable<br><br><br><br>Y si recu=
erdan los errores que tiraba antes, miren
<br><br>IPP2P v0.8.1_rc1 loading<br>IMQ starting with 2 devices...<br>IMQ d=
river loaded successfully.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;Hooking IMQ before NAT on PREROUTING.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;Hooking IMQ after NAT on POSTROUTING.<br><br><br>Luego de =
que esto anduviera, instale el dnsmasq (ya me estoy quedando
<br>con poco libre)<br>y quedo andando as=ED:<br><br> ps ax<br>&nbsp;&nbsp;=
PID&nbsp;&nbsp;Uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;VSZ Stat =
Command<br>&nbsp;&nbsp;&nbsp;&nbsp;1 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; 2380 S&nbsp;&nbsp; init<br>&nbsp;&nbsp;&nbsp;&nbsp;2 root&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SW&lt; [kthreadd]<=
br>&nbsp;&nbsp;&nbsp;&nbsp;3 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SW&lt; [ksoftirqd/0]<br>
&nbsp;&nbsp;&nbsp;&nbsp;4 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;SW&lt; [events/0]<br>&nbsp;&nbsp;&nbsp;&nbsp;5 r=
oot&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
SW&lt; [khelper]<br>&nbsp;&nbsp; 20 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SW&lt; [kblockd/0]<br>&nbsp;&nbsp; 40 =
root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;SW&nbsp;&nbsp;[pdflush]<br>&nbsp;&nbsp; 41 root&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SW&nbsp;&nbsp;[pdflush]<br>&nb=
sp;&nbsp; 42 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;SW&lt; [kswapd0]
<br>&nbsp;&nbsp; 43 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;SW&lt; [aio/0]<br>&nbsp;&nbsp; 87 root&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;SW&lt; [mtdblockd]<=
br>&nbsp;&nbsp;256 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;SWN [jffs2_gcd_mtd2]<br>&nbsp;&nbsp;262 root&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp; 2380 S&nbsp;&nbsp; logger -s -p 6 -t<br>&nbsp;&nb=
sp;263 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2384 S&nbsp;&nbsp; /bin/ash=
 --login
<br>&nbsp;&nbsp;271 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2392 S&nbsp;&n=
bsp; syslogd -C16<br>&nbsp;&nbsp;273 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; 2372 S&nbsp;&nbsp; klogd<br>&nbsp;&nbsp;281 root&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp; 1128 S&nbsp;&nbsp; /sbin/hotplug2 --override --persistent<br>-=
-max-children<br>&nbsp;&nbsp;669 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2=
380 S&nbsp;&nbsp; httpd -p 80 -h /www -r OpenWrt
<br>&nbsp;&nbsp;673 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2376 S&nbsp;&n=
bsp; telnetd -l /bin/ash<br>&nbsp;&nbsp;885 root&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp; 2380 S&nbsp;&nbsp; /usr/sbin/httpd -p 8080 -h /www<br> 1080 root&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1404 S&nbsp;&nbsp; hostapd -B /var/run/=
hostapd-ath2.conf<br> 1122 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1580 S&=
nbsp;&nbsp; /usr/sbin/batmand -o 1500 -g 5000 -a
<br><a href=3D"http://10.22.64.0/25">10.22.64.0/25</a> -a<br> 1123 root&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1580 S&nbsp;&nbsp; /usr/sbin/batmand -o 15=
00 -g 5000 -a<br><a href=3D"http://10.22.64.0/25">10.22.64.0/25</a> -a<br> =
1125 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1580 S&nbsp;&nbsp; /usr/sbin/=
batmand -o 1500 -g 5000 -a
<br><a href=3D"http://10.22.64.0/25">10.22.64.0/25</a> -a<br> 1126 root&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1580 S&nbsp;&nbsp; /usr/sbin/batmand -o 15=
00 -g 5000 -a<br><a href=3D"http://10.22.64.0/25">10.22.64.0/25</a> -a<br> =
1156 nobody&nbsp;&nbsp;&nbsp;&nbsp; 1260 S&nbsp;&nbsp; /usr/sbin/dnsmasq -C=
 /etc/dnsmasq.ap.conf
<br>--bind-inte<br> 1161 nobody&nbsp;&nbsp;&nbsp;&nbsp; 1260 S&nbsp;&nbsp; =
/usr/sbin/dnsmasq -C /etc/dnsmasq.Myap.conf<br>--bind-in<br> 1165 root&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2384 S&nbsp;&nbsp; crond -c /etc/crontabs<b=
r> 1217 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2112 S&nbsp;&nbsp; /usr/bi=
n/nodogsplash<br> 1387 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2112 S&nbsp=
;&nbsp; /usr/bin/nodogsplash
<br> 1388 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2112 S&nbsp;&nbsp; /usr/=
bin/nodogsplash<br> 1389 root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2112 S&nb=
sp;&nbsp; /usr/bin/nodogsplash<br><br><br>Por =FAltimo le instale el coova,=
 por que si no, no sirve de nada el<br>captive :D<br><br>Pero no lo he hech=
o andar.
<br><br><br>;)<br>&gt;<br>--<br>Sebasti=E1n D. Criado - scriado{en}ciudad.c=
om.ar<br>NO A LA MATRICULACI=D3N OBLIGATORIA -<br><a href=3D"http://noalama=
tricula.wordpress.com/about/">http://noalamatricula.wordpress.com/about/</a=
><br>
<a href=3D"http://L.U.G.Ro">L.U.G.Ro</a> - <a href=3D"http://www.lugro.org.=
ar">http://www.lugro.org.ar</a><br>GNU/Linux Registered User # 146768<br>--=
-----------------------------------------------------------------<br>&quot;=
Si el Universo fuera un programa estar=EDa hecho en C, y correr=EDa sobre
<br>un sistema UNIX&quot;<br><br></blockquote></div><br>

------=_Part_16646_19595081.1198027108882--