Ticket #187 (closed defect: fixed)
luci-app-qos forsake compatibility with iptables-mod-filter dependency
| Reported by: | reporter | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | |
| Component: | LuCI Applications | Keywords: | |
| Cc: |
Description
Changeset 6691 enforced a new search path for L7 patterns in order to match recent L7 patterns folder structure (/etc/l7-protocols/*/*.pat).
However iptables-mod-filter dependency still places L7 patterns in /etc/l7-protocols.
Package iptables-mod-filter (1.4.10-1) is installed on root and has the following files: /etc/l7-protocols/msnmessenger.pat /etc/l7-protocols/jabber.pat /usr/lib/iptables/libxt_layer7.so /etc/l7-protocols/vnc.pat /etc/l7-protocols/ntp.pat /etc/l7-protocols/http.pat /usr/lib/iptables/libxt_string.so /etc/l7-protocols/irc.pat /etc/l7-protocols/smtp.pat /etc/l7-protocols/bittorrent.pat /etc/l7-protocols/gnutella.pat /etc/l7-protocols/ssl.pat /etc/l7-protocols/ident.pat /etc/l7-protocols/aim.pat /etc/l7-protocols/ftp.pat /etc/l7-protocols/edonkey.pat /etc/l7-protocols/fasttrack.pat /etc/l7-protocols/pop3.pat
As a result no L7 pattern will be available under Service doropdown menu in LuCI "Network>QOS" section.
Enabling QOS from luci will then override /etc/config/qos defaults for bittorent and emule rules (service field for those will be "all")
It turns out that layer7 match for iptables will works whenever L7 patterns are placed in /etc/l7-protocols or its subfolders (malware, extra, file_types, protocol ) but LuCI currently breaks its compatibility with iptables-mod-filter dependency
