Re: [Announce] genwall a simple iptables firewall
 

@halftux
Just checked again after getting the update from yesterday and now I do have the png and the desktop file :D (only added to latest version?)
And thanks for the revising work in advance. If you need help/advice/suggestions, we are here...

Re: [Announce] genwall a simple iptables firewall
 

The desktop file should be there since the first release (1.0.0) which was uploaded to extras. For the first release the desktop file was using sudser. This was no more needed for the upcoming versions because I added a script for the desktop file.

It could be that in version 1.0.2 the desktop file got removed because of a mistake in creating the dsc/tar.gz file. I copied old sources and forget to change some pro file which was pointing to another directory. But my deb file which I compiled on my local machine had everytime a desktop file. For further releases and the future I will use the deb from extras to see if everything is alright.

Thank you, I really appreciate the help from the community. And I am thankful for every hint or comments for improvements. I am willing to make it more perfect and to make it maemo/linux conform.

However I am not a professional and I don't know everything. But I learned many things by reading in this forum thanks to all people who are posting informations, explanations and give helpful answers.

And sorry that there is no good documentation for my application. I think for some people it is not easy to use and to find all necessary option to make the desired configuration. For me it is easy and self-explanatory due to the fact that I created the gui.
I hope I will find the time to create some example scenarios with explanations.

Also if someone has a problem with some scenario he can ask here and I try to help or writing a small step by step tutorial.

@disappear
I am sorry that I not answered your question about iptables but as far as I know your problem can not be solved with iptables It has to be done with filtering some dns inqueries.
However I don't know how to do it with N900. But it is still on my todo list:)

Re: [Announce] genwall a simple iptables firewall
 

New update out now!

1.0.4
- removed rootsh and gainroot
- added genwall.sudoers
- added reboot checkbox to save and load function
- added iptables boot rules file indicator
- added dialog when deleting user data


I have found an interesting bug I don't know what causes this but on my N900 with power kernel v52 and cssu 21.2011.38-1Tmaemo8.3 when the firewall is running I can't hear the ringtone when I get a call. It looks like that nothing get blocked from firewall.

Without cssu and kernel v51 there is everything fine. I will update cssu and will see if this is still a problem.

So please try to call yourself and check, otherwise it could be that you will miss an important call.

Re: [Announce] genwall a simple iptables firewall
 

I am really sorry but it seems that in my sudoers.d folder is something which allows everything. That is why for me 1.0.4 runs with the desktop file.
I will correct the genwall.sudoers that it will run on every system.
So 1.0.5 is on the way.

Re: [Announce] genwall a simple iptables firewall
 

It doesn't start from desktop here

Opening as root with run-standalone.sh /opt/genwall/genwall & running as normal user works.

However the desktop file doesn't work. I am on version 1.0.5.

Re: [Announce] genwall a simple iptables firewall
 

You can compare:

/etc/sudoers.d/genwall.sudoers

/usr/share/application/hildon/genwall.desktop should contain:

When this is the case maybe the postinstall script was not working fine. You can try to run in console "update-sudoers" and try the desktop file again.

Did you updated an old version or was this a new installation?
I am wondering if somebody else run into this problem with version 1.0.5.

Re: [Announce] genwall a simple iptables firewall
 

Looks the Same:

Nokia-N900:~# cat /etc/sudoers.d/genwall.sudoers
user ALL = NOPASSWD: /usr/bin/run-standalone.sh /opt/genwall/genwall
user ALL = NOPASSWD: /usr/bin/run-standalone.sh genwall
Nokia-N900:~# cat /usr/share/applications/hildon/genwall.desktop
[Desktop Entry]
Encoding=UTF-8
Version=1.0
Type=Application
Terminal=false
Name=Genwall
Exec=sudo run-standalone.sh /opt/genwall/genwall
Icon=genwall
X-Window-Icon=genwall
X-HildonDesk-ShowInToolbar=true
X-Osso-Type=application/x-executable
Nokia-N900:~#

Also it's a new install. Starting from the commandline just works

Re: [Announce] genwall a simple iptables firewall
 

That means sudser.d is working for genwall when you starting it from commandlinie with sudo. But I don't know what causes the problem with the desktop link.
I have two N900 and at both it is working. I am using both daily and can't flash them to have stock conditions.


On the N900 which comes nearest to stock:

- no sudser
- no rootsh
- has mad-developer
- has openssh
- and has some other packages

It is working.

Does somebody else has the same problem that the desktop link is not working?

When I find a cheap N900 I will buy another one only for development.

Re: [Announce] genwall a simple iptables firewall
 

I do have no problems.

@mr_pingu
What does
cat /etc/sudoers | grep genwall
say?

Starting from commandline also works as plain user.
But I am not sure wether it will work correctly?
@halftux
What about setting file permissions to 754 (instead 755)? Just im case above is true and starting as user works but will not work as expected...

Re: [Announce] genwall a simple iptables firewall
 

Good I thought with my N900 is something wrong.

Yeah for the future I can change file permission. However when you starting it as user the password routine in my application will fail and will exit the program immediately. So in principle there is no chance to see the genwall main widgets as user without root-rights(sudo), at this point they are even not created. You can see only the password dialog for some milliseconds.
I think I will add an error message.