[GH0]

[zoomlink]

Please got to /opt/etc and make sure all iptable scripts i.e.iptables.birma, iptables.asia, etc. all have the following as the first line:

#!/bin/sh

If that does not work, try

#!/opt/bin/bash

And give it another try.

Keep in mind that it may be necessary to disable the service linked to the iptable script before editing the script.

For example, do a service asiablock stop before you go and edit iptables.asia.

[basmaf]

Changes in busybox require a change in the scripts

Believe its disussed somewhere in the optware thread can't recall who provide the fix.

Stop asiablock
cd into /opt/etc
Delete iptables.asia & iptables.asia.rules

You need to edit /opt/etc/init.d/S95asiablock

Edit the following line:

[GH0]

That did resolve the permission issue on the shell script, however, I don't believe that the firewall is actively working, as I am testing the webserver with my VPS in Canada, and I am still able to access the service.

This is what it is doing from time to time:



You notice that it works fine one time (in that the connection fails), however, then asiablock begins to fail and allows connections to pass through.

This was tested on a Canadian IP Address, and a UK IP Address. Both of which are blocked.

[zoomlink]

Ok Basmaf has the more permanent and elegant fix. I was on a bit too much eggnog.

Please make sure you have Stophammer and Stophack enabled as well.

Since I poked around on this.... even after editing the S95asiablock script, when I issue the command 'service asiablock stop' I still get this:

sh: /tmp/etc/config/asia.prewall: Permission denied

Basmaf, do you have any idea on why I still get this permission denied error?

[GH0]

[GH0]

Bump. Would like to figure out what has changed since going from the older version of optware package to this new version, to the point that it wont filter correctly anymore.

[basmaf]

[GH0]

[GH0]

Bump, would really like some help in getting asiablock to work properly.

[hannibal_bill]

A wise man once said:

[GH0]

What I have shouldn't completely ignore one or the other though, if it is setup how it is.

It should loosen the load on the router, yes, however I don't see how that will prevent it from blocking things if my current firewall rule hasn't worked at all.

[GH0]

Bump

Tried the above firewall command, but it is still failing to block services.

[GH0]

Bump.

Still need some assistance in getting asiablock to work correctly.

I know that the IPTables are being loaded:

[barryware]

frater gave me this some time ago when he was helping me debug asiablock.

as you can see, the order of things in the command line is diff. I am also blocking everything, not just specific ports. Frater also warned me about this due to the load it will put on the router.

wanf=`nvram get wan_iface`
iptables -I INPUT 2 -p tcp -i $wanf -j asia
iptables -I FORWARD 1 -i $wanf -j asia