**** BEGIN LOGGING AT Tue Oct 29 02:59:58 2013 Oct 29 07:59:48 https://dev.openwrt.org/browser/trunk/package/network/config/firewall/Makefile Oct 29 07:59:56 is missing nat reflection Oct 29 08:07:29 ? Oct 29 08:10:09 jow you are in charge of nat reflection? Oct 29 08:11:02 yes Oct 29 08:12:29 $(INSTALL_DATA) ./files/reflection.hotplug $(1)/etc/hotplug.d/firewall/10-nat-reflection Oct 29 08:12:39 is missing from a couple revisions of openwrt Oct 29 08:12:53 yes, because the firewall has been entirely rewritten in C Oct 29 08:13:04 oh garbage Oct 29 08:13:15 http://nbd.name/gitweb.cgi?p=firewall3.git;a=blob;f=redirects.c;h=b95c1ba1cb5b51f0178b403ca661a1fd109e7665;hb=c25922c05ae594c4c35fa65f27fd21c3a033f4ec#l533 Oct 29 08:13:55 jow_laptop: actually, NAT reflection seems indeed broken in AA Oct 29 08:14:18 what revision did nat reflection break Oct 29 08:14:18 zorun: it worked for me in AA Oct 29 08:14:27 and it works for me in current trunk Oct 29 08:14:48 AA has certain limitiations, e.g. it can only reflect if the internal lan is called lan Oct 29 08:15:07 need some more specifics than "it seems broken" Oct 29 08:15:16 e.g. firewall config and generated rule set Oct 29 08:15:17 bbl Oct 29 08:15:27 /lib/firewall/core_redirect.sh on AA does not seem take the "reflection" option into account Oct 29 08:15:43 zorun: yes of coure, because that is entirely handled by a hotplug script Oct 29 08:15:56 (/etc/hotplug.d/firewall/10-nat-reflection) Oct 29 08:16:46 I do not have 10-nat-reflection I am running ATTITUDE ADJUSTMENT (12.09, r36088) Oct 29 08:17:27 jow_laptop: alright Oct 29 08:18:30 DJJeff: that seems to be a local problem, http://downloads.openwrt.org/attitude_adjustment/12.09/ar71xx/generic/packages/firewall_2-55.1_all.ipk certainly contains it Oct 29 08:21:52 ah ok I reinstalled firewall_2-55 Oct 29 08:22:49 jow_laptop: http://paste.debian.net/hidden/8895cc82/ and http://paste.debian.net/hidden/a7c25dd3/ Oct 29 08:24:19 actually, I found this to be possibly similar: https://dev.openwrt.org/ticket/13238 Oct 29 08:24:29 though I don't remember reflection ever working Oct 29 08:24:57 zorun, it worked for me in rc1 Oct 29 08:25:14 DJJeff: I mean, with AA Oct 29 08:25:28 12.09-rc1 = AA Oct 29 08:26:05 try this # FW_TRACE=1 fw restart Oct 29 08:26:26 tell me if you see "nat_reflection_in" &/or "nat_reflection_out" Oct 29 08:29:33 actually that ticked you linked may be related Oct 29 08:29:41 well, these chains do exist in iptables, but they are empty Oct 29 08:31:17 they do not even exist for me Oct 29 08:31:22 what revision are you on Oct 29 08:32:38 AA, r36088, on ar71xx Oct 29 08:33:03 same as me wow Oct 29 08:33:38 do # opkg list-installed and pastebin that for me? Oct 29 08:38:33 jow_laptop: could you just check r34976? this merge looks rather involved, and is the last change to the reflection hotplog script before AA Oct 29 08:42:49 zorun: your redirects lack an "Option dest lan" Oct 29 08:43:00 reflection in AA requires the dest option to be set Oct 29 08:44:20 DJJeff: as I said, I need to see the config Oct 29 08:44:27 this is most likely a configuration problem Oct 29 08:45:31 option target 'DNAT' Oct 29 08:45:34 is not enough? Oct 29 08:46:14 option dest lan is required as well Oct 29 08:51:38 did not work for me..... | http://pastie.org/pastes/8439501/text?key=o9praem4pr5bdla09n5a Oct 29 08:52:18 jow_laptop: alright, "option dest lan" does the trick, thanks :) Oct 29 08:53:06 DJJeff: FW_TRACE doesn ot output reflection rules Oct 29 08:53:13 they're done separately by hotplug Oct 29 08:53:31 let me test with a nmap scan hold on Oct 29 08:54:09 ok that did the trick Oct 29 08:54:10 wow Oct 29 08:57:09 time for a beer cheers jow_laptop Oct 29 09:03:20 welcomer Oct 29 09:55:21 jow r38576 trunk/package/libs/ (5 files in 2 dirs) * Revert "[cyassl]: upgrade to 2.8.0" Oct 29 10:51:05 <_trine> jow_laptop, thanks for reverting cyassl Oct 29 11:21:15 nbd: fyi, the WZR-HP-G300NH with AA + aa-mac80211.git 767acbf0045924a0619cd494ec72edbbdad7a95e looks a lot better. although I noticed last week that it already showed much less errors before the upgrade Oct 29 11:21:35 http://pastebin.com/ig9094pJ after 5d 16h uptime Oct 29 11:22:13 also ssh sessions don't tend to annoy me all the time :) Oct 29 11:23:04 :) Oct 29 11:23:51 who knows it's the rf jammer in the prison on the other side of the road Oct 29 11:24:04 that is broken now :P Oct 29 11:25:17 with wifi, bugs are pretty much always a more likely source of errors than attackers ;) Oct 29 11:26:27 hehe. now if only I can get > MCS 7 Oct 29 11:26:32 I guess this is a stupid antenna Oct 29 11:27:00 you can only get > MCS 7 if you have more than one antenna ;) Oct 29 11:27:19 yeah Oct 29 11:27:21 well Oct 29 11:27:21 http://www.asrock.com/mb/sticker/Bundle-WiFi%28L%29.jpg Oct 29 11:27:37 this is the antenna, it has 2 wires going to it at least Oct 29 11:27:45 what wifi chip does it use? Oct 29 11:28:20 Oct 23 19:52:46 roadrunner kernel: [ 3.626608] ieee80211 phy0: Atheros AR9285 Rev:2 mem=0xffffc9000ace0000, irq=16 Oct 29 11:28:33 that's a single-stream chipset Oct 29 11:28:38 it can have two antennas Oct 29 11:28:43 but only for switching diversity Oct 29 11:28:45 oh ? Oct 29 11:29:16 it will never do > MCS 7 ;) Oct 29 11:29:38 understood, I didn't think it was advertised like that though Oct 29 11:29:38 meh Oct 29 11:30:08 guess half-length miniPCIe is limited Oct 29 11:30:15 nah, it's the chipset Oct 29 11:30:23 you can get half-size miniPCIe cards with 3x3 ;) Oct 29 11:30:48 I've been looking for those, gave up and ordered this one instead Oct 29 11:31:11 what chipset would I be looking for then ? Oct 29 11:31:50 ar9380 Oct 29 11:31:56 or ar9580 Oct 29 11:32:13 or the same with 90 instead of 80 Oct 29 11:32:40 ar9x90 has slightly better performance than ar9x80 Oct 29 11:33:49 ok, thanks for the info Oct 29 11:34:38 might need to drill an extra hole somewhere in the mobo bracket Oct 29 11:34:55 ok, that was easy http://www.compex.com.sg/productdetailinfo.asp?model=WLE351NX&acc1Panel=1 Oct 29 11:36:19 finding a shop that sells them seems a bit harder :P Oct 29 11:39:09 <_trine> http://www.ebay.co.uk/itm/Compex-WLE350NX-Atheros-AR9580-XB116-Mini-Card-450-Mbps-802-11N-ABG-3x3-MiMO-/190874623673?pt=UK_Computing_NetworkCards_RL&hash=item2c71039eb9 Oct 29 11:39:44 ouch dat price :/ Oct 29 11:40:01 also that seems full length Oct 29 12:41:07 jow_laptop: ping Oct 29 12:42:15 slachta: pong Oct 29 12:43:01 may I ask you for a quick fix for this? https://dev.openwrt.org/ticket/12415 Oct 29 12:43:28 I'll put it on the todo Oct 29 12:44:02 okay, it's just about renaming s/outbountproxy/outboundproxy/g Oct 29 13:25:02 cyrus r38577 trunk/package/network/ipv6/odhcp6c/Makefile * odhcp6c: Multiple improvements and fixes Oct 29 14:13:39 nbd r38578 trunk/package/libs/libubox/Makefile Oct 29 14:13:39 libubox: update to latest version, adds minor improvements to jshn, blobmsg and uloop Oct 29 17:18:33 <_trine> I am having a problem compiling for my dockstar even after a distclean http://pastebin.mozilla.org/3375586 Oct 29 17:20:27 <_trine> using gcc 4.6.x with Linaro enhancements Oct 29 17:21:06 <_trine> gcc 4.8.x with Linaro enhancements seems to compile but the kernel didnt boot Oct 29 18:32:58 build #393 of rb532 is complete: Failure [failed shell_12] Build details are at http://buildbot.openwrt.org:8010/builders/rb532/builds/393 Oct 29 18:34:50 build #393 of ppc44x is complete: Failure [failed shell_12] Build details are at http://buildbot.openwrt.org:8010/builders/ppc44x/builds/393 Oct 29 19:01:13 build #412 of ppc40x is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ppc40x/builds/412 Oct 29 19:32:00 why cannot i see this profile: https://dev.openwrt.org/browser/trunk/target/linux/lantiq/xway/profiles/tplink.mk?rev=37542 in the make menuconfig when i select lantiq as my target? Oct 29 20:18:15 build #368 of sibyte is complete: Failure [failed shell_12] Build details are at http://buildbot.openwrt.org:8010/builders/sibyte/builds/368 Oct 29 20:48:36 nbd: sorry, was travelling. what was which issue exactly? I have one dhcp issue... a patch to include a flag that tells dnsmasq that the client doesn't accept unicast replies... and the other issue was (last I checked) blocking on damage in parallel builds of eglibc. Oct 29 20:52:58 jow_laptop: are asking about this patch? http://paste.fedoraproject.org/50300/7993113/ Oct 29 20:54:14 build #426 of orion is complete: Failure [failed compile_8] Build details are at http://buildbot.openwrt.org:8010/builders/orion/builds/426 Oct 29 20:54:33 jow_laptop: the point is that if the option "broadcast" is set, this adds a tag called "needs-broadcast" to the host's config. globally, the line: "dhcp-broadcast=tags:needs-broadcast" will force this semantic wherever that tag has been set for the host's profile. Oct 29 20:55:11 err... no 's'. just "tag:needs-broadcast". typo. Oct 29 20:55:58 so, if a "config host" contains "option broadcast on", then this adds a ",set:needs-broadcast" tag into the dhcp-host line for that entry. Oct 29 20:56:14 simple, right? ;-) Oct 29 21:07:24 jow_laptop: oh, never mind. saw that it was accepted... didn't see the email that the patch changed state, though. odd. Oct 29 21:14:15 this still doesn't make any sense to me: http://sprunge.us/ZWag Oct 29 21:14:54 i'm losing 2.5MB out of free that doesn't show up anywhere Oct 29 21:18:03 <_trine> does anyone know how to correct this compile failure for my dockstar http://pastebin.mozilla.org/3376848 Oct 29 21:24:53 http://sprunge.us/dVSj Oct 29 21:25:34 join -j 1 /tmp/meminfo-20131029-1* | awk '{ print $0,$4-$2 }' Oct 29 21:40:51 _trine: the answer is in a forum post and trac ticket Oct 29 21:41:12 is it possible to interrupt the "make" and redo it with -j ? Oct 29 21:41:21 without having to start all over again Oct 29 21:43:31 <_trine> swalker, does that mean someone else has experienced this? Oct 29 21:45:08 aye, http://buildbot.openwrt.org:8010/broken_packages/kirkwood/postgresql/compile.txt Oct 29 21:46:12 <_trine> well I will have to wait for a fix then Oct 29 21:46:22 <_trine> thanks for pointing me to it Oct 29 21:59:37 build #414 of ramips is complete: Failure [failed shell_7] Build details are at http://buildbot.openwrt.org:8010/builders/ramips/builds/414 Oct 29 22:25:35 build #378 of avr32 is complete: Failure [failed compile_5] Build details are at http://buildbot.openwrt.org:8010/builders/avr32/builds/378 Oct 29 22:28:55 JyZyXEL: yes, just run make -j again Oct 29 22:29:07 JyZyXEL: it doesn't rebuild packages that haven't changed and have been built already Oct 29 22:29:24 yeah i figured it should do that Oct 29 23:03:27 my poor little Atom has been building for hours Oct 29 23:10:29 probably not the best choice of a build machine Oct 29 23:11:03 yeah i didn't realize it was gonna take this much time, but at least its now done after 3 hours Oct 29 23:21:42 build #356 of kirkwood is complete: Failure [failed compile_5] Build details are at http://buildbot.openwrt.org:8010/builders/kirkwood/builds/356 Oct 29 23:24:58 blogic: what ever happen to lantiq/xway/profiles/tplink.mk, it used to exist but then was removed? Oct 29 23:33:09 JyZyXEL: it got moved here target/linux/lantiq/xrx200/profiles/tplink.mk Oct 29 23:35:51 oh i see, didn't realize right away that the XWAY VRX268 was actually part of xrx200 Oct 29 23:58:36 build #126 of mpc85xx is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/mpc85xx/builds/126 Oct 30 00:51:48 luka r38579 trunk/target/linux/imx6/profiles/120-gateworks.mk * imx6: update gateworks profile with extra packages Oct 30 01:03:48 tripolar r38580 packages/libs/ libotr libotr/Makefile * [packages] add libotr package Oct 30 01:09:57 tripolar r38581 packages/net/ git/Makefile git/patches/100-convert_builtin.patch git/patches/001-config-do-not-use-C-function-names-as-struct-members.patch * [packages] git: update to 1.8.4.2 Oct 30 01:12:05 tripolar r38582 packages/libs/ loudmouth/Makefile loudmouth * [packages] add loudmouth need for mcabber (follows soon) Oct 30 01:15:58 tripolar r38583 packages/libs/gpgme/Makefile * [packages] gpgme: update to 1.4.3 Oct 30 01:18:32 tripolar r38584 packages/libs/gpgme/Makefile * [packages] libpgme: add gnupg dependency again Oct 30 01:20:46 tripolar r38585 packages/net/ mcabber mcabber/Makefile * [packages] add mcabber **** ENDING LOGGING AT Wed Oct 30 02:59:58 2013