Comments you submit will be routed for moderation. If you have an account, please log in first.

Ticket #187 (closed defect: fixed)

Opened 2 years ago

Last modified 2 years ago

luci-app-qos forsake compatibility with iptables-mod-filter dependency

Reported by: reporter Owned by:
Priority: major Milestone:
Component: LuCI Applications Keywords:
Cc:

Description

Changeset 6691 enforced a new search path for L7 patterns in order to match recent  L7 patterns folder structure (/etc/l7-protocols/*/*.pat).

However iptables-mod-filter dependency still places L7 patterns in /etc/l7-protocols.

Package iptables-mod-filter (1.4.10-1) is installed on root and has the following files:
/etc/l7-protocols/msnmessenger.pat
/etc/l7-protocols/jabber.pat
/usr/lib/iptables/libxt_layer7.so
/etc/l7-protocols/vnc.pat
/etc/l7-protocols/ntp.pat
/etc/l7-protocols/http.pat
/usr/lib/iptables/libxt_string.so
/etc/l7-protocols/irc.pat
/etc/l7-protocols/smtp.pat
/etc/l7-protocols/bittorrent.pat
/etc/l7-protocols/gnutella.pat
/etc/l7-protocols/ssl.pat
/etc/l7-protocols/ident.pat
/etc/l7-protocols/aim.pat
/etc/l7-protocols/ftp.pat
/etc/l7-protocols/edonkey.pat
/etc/l7-protocols/fasttrack.pat
/etc/l7-protocols/pop3.pat

As a result no L7 pattern will be available under Service doropdown menu in LuCI "Network>QOS" section.

Enabling QOS from luci will then override /etc/config/qos defaults for bittorent and emule rules (service field for those will be "all")

It turns out that layer7 match for iptables will works whenever L7 patterns are placed in /etc/l7-protocols or its subfolders (malware, extra, file_types, protocol ) but LuCI currently breaks its compatibility with iptables-mod-filter dependency

Attachments

Change History

Changed 2 years ago by jow

  • status changed from new to closed
  • resolution set to fixed

Fixed in r6778 - thanks for reporting.

Add/Change #187 (luci-app-qos forsake compatibility with iptables-mod-filter dependency)

Author


E-mail address and user name can be saved in the Preferences.


Action
as closed
The resolution will be deleted. Next status will be 'reopened'
 
Note: See TracTickets for help on using tickets.