ip6 netfilter modules not loading correctly

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
tamritt
DD-WRT Novice


Joined: 18 Aug 2014
Posts: 6

PostPosted: Mon Aug 18, 2014 11:20    Post subject: ip6 netfilter modules not loading correctly Reply with quote
I just installed dd-wrt on a Netgear WNDR3700v4 DD-WRT v24-sp2
(04/18/14) std).

I have managed to enable Ipv6 and a Hurricane electric
tunnel. The next step was to install the IPv6 firewall. As the modules
aren't available by default, I compiled them successfully. I took the
kernel 3.10.37 from the relevant svn-version (23919).
However, loading them always fails with error message like:


Aug 18 06:31:34 gateway kernel: [29020.800000] ip6_tables: Unknown symbol xt_free_table_info (err 0)
Aug 18 06:31:34 gateway kernel: [29020.810000] ip6_tables: Unknown symbol xt_alloc_table_info (err 0)
Aug 18 06:31:34 gateway kernel: [29020.810000] ip6_tables: Unknown symbol xt_recseq (err 0)
Aug 18 06:31:34 gateway kernel: [29020.820000] ip6_tables: Unknown symbol xt_register_table (err 0)
Aug 18 06:31:34 gateway kernel: [29020.830000] ip6_tables: Unknown symbol xt_proto_init (err 0)
Aug 18 06:31:34 gateway kernel: [29020.830000] ip6_tables: Unknown symbol xt_replace_table (err 0)
Aug 18 06:31:34 gateway kernel: [29020.840000] ip6_tables: Unknown symbol ipv6_find_hdr (err 0)
Aug 18 06:31:34 gateway kernel: [29020.840000] ip6_tables: Unknown symbol xt_find_table_lock (err 0)
Aug 18 06:31:34 gateway kernel: [29020.850000] ip6_tables: Unknown symbol xt_table_unlock (err 0)
Aug 18 06:31:34 gateway kernel: [29020.860000] ip6_tables: Unknown symbol xt_proto_fini (err 0)
Aug 18 06:31:34 gateway kernel: [29020.860000] ip6_tables: Unknown symbol xt_find_revision (err 0)
Aug 18 06:31:34 gateway kernel: [29020.870000] ip6_tables: Unknown symbol xt_unregister_table (err 0)

According to /proc/kallsyms, almost all symbols are already defined
in the running kernel. (I couldn't find the symbol ipv6_find_hdr, but
is present in the System.map-file during compilation - is this indicative of the problem?)

I've tried various toolchains
(toolchain-mipsel_r2_gcc-4.6-linaro_uClibc-0.9.33 from the DD-wrt
website) and toolchain-mips_34kc_gcc-4.8-linaro_uClibc-0.9.33.2 (from
openwrt) with the kernel configuration adapted from .config_wndr3700v4
in the kernel sources
($(DD-WRT)/src/linux/universal/linux-3.10) (attached).

However, if I use these toolchains to compile a simple helloWorld
module (attached), this module loads and unloads
correctly.

Any ideas what is going on?
Sponsor
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Mon Aug 18, 2014 12:39    Post subject: Reply with quote
there´s no need to compile them yourself. modules should be included. look for them in absolut path.
_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
tamritt
DD-WRT Novice


Joined: 18 Aug 2014
Posts: 6

PostPosted: Mon Aug 18, 2014 13:44    Post subject: ip6 netfilter modules not loading correctly Reply with quote
I'm afraid I cannot find them anywhere - in particular they are not under /lib/modules/3.10.37 on the router. One example of a missing module is ip6_tables.ko.
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Mon Aug 18, 2014 20:17    Post subject: Reply with quote
hm very strange. you may try an upgrade. maybe you can use my modules, i am on 3.10.40
_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
tamritt
DD-WRT Novice


Joined: 18 Aug 2014
Posts: 6

PostPosted: Mon Aug 18, 2014 20:35    Post subject: Reply with quote
Dear Bascom,

thanks for the hint. Are these 3.10.40-modules easily available on the web?

Also, in the meantime I had a closer look at the issue. I seem to be unable to use any symbols which are exported via EXPORT_SYMBOL_GPL. Symbols exported via EXPORT_SYMBOL work fine. In other words, for some reason the modules are not recognised as being licensed under the GPL even the MODULE_LICENSE("GPL") - command is correctly there (and modinfo produces the right information).
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Tue Aug 19, 2014 6:07    Post subject: Reply with quote
hm. sometimes in BS builds, modules do not work correctly. no, i could copy my modules from firmware.

but these modules should be included on devices with more flash space
nf_defrag_ipv6
ip6_tables.ko
nf_conntrack_ipv6.ko
ip6table_filter.ko

what happens, if you do enable ipv6 ?

_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
tamritt
DD-WRT Novice


Joined: 18 Aug 2014
Posts: 6

PostPosted: Tue Aug 19, 2014 6:53    Post subject: Reply with quote
IPv6 together with radvd is enabled and working. None of the modules you mentioned are present under /lib/modules/3.10.37 - these are exactly the ones I'm looking for (which I have compiled but cannot insert). Hence there is no IPv6-firewall at the moment. The IPv4-firewall is working fine.
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Tue Aug 19, 2014 7:03    Post subject: Reply with quote
i have it under

/lib/modules/3.*.*/kernel/net/ipv6/netfilter/ip6_tables.ko

_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
tamritt
DD-WRT Novice


Joined: 18 Aug 2014
Posts: 6

PostPosted: Tue Aug 19, 2014 10:32    Post subject: Reply with quote
Unfortunately there is nothing at the location you mentioned. Also, the kernel modules that I found were either little-endian (which won't work, as the WNDR3700 has a big-endian chip), or had the same problem. I will need to keep looking...
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Tue Aug 19, 2014 11:47    Post subject: Reply with quote
hm, isnt there enough flash space ?
_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
tamritt
DD-WRT Novice


Joined: 18 Aug 2014
Posts: 6

PostPosted: Tue Aug 19, 2014 17:33    Post subject: Reply with quote
According to the spec, there is plenty of space - 128MB of RAM and 128MB of flash. I also have a usb memory stick attached to the usb port, which gives me a further 2GB. So space is not a problem.
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Tue Aug 19, 2014 18:50    Post subject: Reply with quote
hum maybe with atheros, the modules are not included generally. you may open up a ticket on trac. i also didnt found them on an 8MB flash atheros unit.

anyway, i have uploaded them for you, but i am on broadcom.so, no idea if that works

_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany

PostPosted: Sun Aug 24, 2014 20:35    Post subject: Reply with quote
looks like BS just has added all modules for your type of router.
_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
manus
DD-WRT Novice


Joined: 09 Aug 2011
Posts: 17

PostPosted: Tue Oct 07, 2014 22:47    Post subject: Reply with quote
BasCom wrote:
looks like BS just has added all modules for your type of router.

Where can I find those modules?
I compiled like before on my ubuntu but with last dd-wrt release, I am not able to load ip6_tables:
Code:
insmod: cannot insert '/lib/modules/3.5.7.33/kernel/net/ipv6/netfilter/ip6_tables.ko': unknown symbol in module

Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.030000] ip6_tables: Unknown symbol xt_free_table_info (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.040000] ip6_tables: Unknown symbol xt_alloc_table_info (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.040000] ip6_tables: Unknown symbol xt_recseq (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.050000] ip6_tables: Unknown symbol xt_register_table (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.060000] ip6_tables: Unknown symbol xt_proto_init (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.060000] ip6_tables: Unknown symbol xt_replace_table (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.070000] ip6_tables: Unknown symbol xt_find_table_lock (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.080000] ip6_tables: Unknown symbol xt_table_unlock (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.080000] ip6_tables: Unknown symbol xt_proto_fini (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.090000] ip6_tables: Unknown symbol xt_find_revision (err 0)
Oct  7 22:32:46 WNDR3700v2 kern.warn kernel: [  142.100000] ip6_tables: Unknown symbol xt_unregister_table (err 0)
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum