• remotely fidonet

    From Maurice Kinal@1:153/7001 to Benny Pedersen on Tue Dec 5 08:29:53 2017
    Hey Benny!

    I now have nft working on;

    ----- "<Esc>:read !uname -a" starts
    Linux lilmikey 4.14.3 #1 SMP Tue Dec 5 07:10:07 UTC 2017 x86_64 Intel(R) Atom(TM) CPU N2800 @ 1.86GHz GenuineIntel GNU/Linux
    ----- "<Esc>:read !uname -a" ends

    Everything is working as it should including the remote fidonet messaging thingy - bash based - as indicated by the tearline below. I am unsure if nftables is better than iptables for masquerading but near as I can tell it isn't worse.

    I think this machine needs it's own Fidonet address. Do you care to sponsor it
    by blessing it with a zone 2 node number? I am betting it can handle it.

    Life is good,
    Maurice

    ... Don't cry for me I have vi.
    --- GNU bash, version 4.4.12(1)-release (x86_64-bonnell-linux-gnu)
    * Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)
  • From Benny Pedersen@2:230/0 to Maurice Kinal on Thu Dec 14 17:36:54 2017
    Hello Maurice!

    05 Dec 2017 08:29, Maurice Kinal wrote to Benny Pedersen:

    Everything is working as it should including the remote fidonet
    messaging thingy - bash based - as indicated by the tearline below.
    I am unsure if nftables is better than iptables for masquerading but
    near as I can tell it isn't worse.

    would you mind share it ?

    I think this machine needs it's own Fidonet address. Do you care to sponsor it by blessing it with a zone 2 node number? I am betting it
    can handle it.

    i can, netmail me with details from makenl


    Regards Benny

    ... there can only be one way of life, and it works :)

    --- Msged/LNX 6.2.0 (Linux/4.14.4-gentoo (i686))
    * Origin: I will always keep a PC running CPM 3.0 (2:230/0)
  • From Maurice Kinal@1:153/7001 to Benny Pedersen on Thu Dec 14 19:03:46 2017
    Hey Benny!

    would you mind share it ?

    I thought I already did. If not then yes I'll be willing to share what I have working regarding nftables with respect to NAT/masquerading.

    Life is good,
    Maurice

    ... Don't cry for me I have vi.
    --- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
    * Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)
  • From Maurice Kinal@1:153/7001 to Benny Pedersen on Thu Dec 14 19:08:16 2017
    Hey Benny!

    i can, netmail me with details from makenl

    I just tried to netmail you with no success. The connection timed out. Try polling 1:153/7001 as there is netmail waiting there for you.

    Life is good,
    Maurice

    ... Don't cry for me I have vi.
    --- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
    * Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)
  • From Benny Pedersen@2:230/0 to Maurice Kinal on Sat Dec 16 10:07:12 2017
    Hello Maurice!

    14 Dec 2017 19:03, Maurice Kinal wrote to Benny Pedersen:

    would you mind share it ?

    I thought I already did. If not then yes I'll be willing to share
    what I have working regarding nftables with respect to
    NAT/masquerading.

    not to what i remember now, we shared configs, but not working eksample that works in pratice :=)

    like i now did previous msg here for iptable


    Regards Benny

    ... there can only be one way of life, and it works :)

    --- Msged/LNX 6.2.0 (Linux/4.14.6-gentoo (i686))
    * Origin: I will always keep a PC running CPM 3.0 (2:230/0)
  • From Benny Pedersen@2:230/0 to Maurice Kinal on Sat Dec 16 10:08:42 2017
    Hello Maurice!

    14 Dec 2017 19:08, Maurice Kinal wrote to Benny Pedersen:

    i can, netmail me with details from makenl

    I just tried to netmail you with no success. The connection timed
    out. Try polling 1:153/7001 as there is netmail waiting there for
    you.

    you have binkp with zlib/bzip2 ?, if so try make it not have it, qico does not support it yet, is the only thing i could find why it fails, else netmail me to
    1:261/38.20

    good to have backup :=)

    i will try add binkp daemon if it continues to be problematic, just hate to use
    binkp on non standard port :(


    Regards Benny

    ... there can only be one way of life, and it works :)

    --- Msged/LNX 6.2.0 (Linux/4.14.6-gentoo (i686))
    * Origin: I will always keep a PC running CPM 3.0 (2:230/0)
  • From Maurice Kinal@1:153/7001 to Benny Pedersen on Sat Dec 16 10:24:20 2017
    Hey Benny!

    not working eksample that works in pratice

    Yes it is. In fact it is NATing for 3 smartphones for about a week now and have yet to hear a complaint from any of them.

    ----- /etc/sysconfig/ipv4-masq starts
    table ip nat {
    chain prerouting {
    type nat hook prerouting priority 0; policy accept;
    }
    chain postrouting {
    type nat hook postrouting priority 100; policy accept;
    oifname "eth0" masquerade
    }
    }
    ----- /etc/sysconfig/ipv4-masq ends

    I start it up in the wireless rc script using these two commands;
    echo 1 > /proc/sys/net/ipv4/ip_forward
    nft -f /etc/sysconfig/ipv4-masq

    It's just that simple. Mind you the iptables NAT/masquerade wasn't anymore complicated.

    Life is good,
    Maurice

    ... Don't cry for me I have vi.
    --- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
    * Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)
  • From Maurice Kinal@1:153/7001 to Benny Pedersen on Sat Dec 16 10:35:40 2017
    Hey Benny!

    you have binkp with zlib/bzip2 ?, if so try make it not have it

    I'll see what is what later but it seems to me that one of the links to 1:153/7001 doesn't use zlib/bzip2 on-the-fly compression so I doubt that is the
    issue. Besides it is a small netmail and wouldn't get compressed since it is under the minimum for on-the-fly compression.

    i will try add binkp daemon if it continues to be problematic,
    just hate to use binkp on non standard port

    Not to worry. It was just a thought.

    Life is good,
    Maurice

    ... Don't cry for me I have vi.
    --- GNU bash, version 4.4.12(1)-release (x86_64-silvermont-linux-gnu)
    * Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)