Dev1 Galaxy Forum / arptables

Re: arptables

dummy@example.com (Head_on_a_Stick) — Tue, 06 Oct 2020 18:56:06 +0000

bbatten wrote:

No luck.

That is not enough information for us to be able to help you — please post the relevant log entries that show the failures to which you allude.

Can we also see

update-alternatives --display iptables
iptables-save

Re: arptables

dummy@example.com (ralph.ronnquist) — Mon, 05 Oct 2020 01:49:26 +0000

@bbatten: iptables on beowulf (or buster, really) doesn't require arptables or ebtables, but it recommends nftables.

Upon installation, it gets set up to use the iptables-nft alternative implementation and then it provides syntax transparency via /usr/sbin/xtables-nft-multi so as to use the "traditional" iptables rules language for manipulating and reviewing the rules.

It also gives you the option to change it to use the iptables-legacy implementation through update-alternatives.

Doesn't that work for you?

Re: arptables

dummy@example.com (GlennW) — Sun, 04 Oct 2020 22:33:00 +0000

I've tried this, it's hectic! but only because I was trying to stick with iptables instead of ebtables, I don't know why really,

I just didn't want to change from iptables squid firewalled proxy server setup I'd been using for years.

I ended up changing my scripts to nftables, seems to work ok.

I used arch and gentoo help/wiki pages to work my way through the install and setup.

Re: arptables

dummy@example.com (bbatten) — Sun, 04 Oct 2020 21:31:57 +0000

Thanks for the replies.
@ralph.ronnquist: I don't have nftables installed.
@Head_on_a_Stick: I installed ebtables and arptables, then updated etc-alternatives per your suggestion. No luck.

FWIW, while running on ascii, I did not have ebtables or arptables installed. Things worked just fine without them. I suspect that iptables-legacy for beowulf is not really bit-for-bit the same as the iptables available in ascii. Is there an "oldstable" for devuan that would allow me to purge beowulf iptables, arptables, and ebtables, then install the version of iptables available there?

Thanks,

Re: arptables

dummy@example.com (xinomilo) — Thu, 01 Oct 2020 10:38:43 +0000

more info here : https://wiki.debian.org/iptables

Re: arptables

dummy@example.com (Head_on_a_Stick) — Thu, 01 Oct 2020 06:09:52 +0000

^ Looks like the OP is already using the legacy iptables version.

And anyway there's no need to uninstall nftables:

# update-alternatives --set iptables /usr/sbin/iptables-legacy

Re: arptables

dummy@example.com (ralph.ronnquist) — Wed, 30 Sep 2020 21:20:03 +0000

You might also want to reinstall iptables without nftables; perhaps something like

# apt-get install --reinstall nftables- iptables

That should give you a set up that allows the "normal" iptables rules.

Re: arptables

dummy@example.com (Head_on_a_Stick) — Wed, 30 Sep 2020 16:38:45 +0000

Have you tried

# apt install {eb,arp}tables
# update-alternatives --set arptables /usr/sbin/arptables-legacy
# update-alternatives --set ebtables /usr/sbin/ebtables-legacy

arptables

dummy@example.com (bbatten) — Tue, 29 Sep 2020 20:53:11 +0000

I am using iptables-legacy. From the installation procedure output:

iptables (1.8.1-1) unstable; urgency=medium
By default, this package will try to use the nf_tables kernel backend
instead of the xtables one. Please, read more about this in
/usr/share/doc/iptables/README.Debian, including details about the new
update-alternatives configuration possibilities.
This is a major update on the way iptables works and may have severe impact
in running systems which are upgrading between Debian versions.
The arptables and ebtables binaries are also affected, and those packages
will be updated soon as well.
-- Arturo Borrero Gonzalez Wed, 24 Oct 2018 14:00:00 +0200

Bottom line is I'm screwed. My iptables setup no longer works.

Is it safe to use the Debian arptables and ebtables packages? the README.debian says arptables-legacy and ebtables-legacy are in the Debian packages.

Thanks,