Ron F. wrote:
> Hi PasTim,
>
> Part of my problem, is that iptables has to be set up to use ipset. I
> found this article:
> https://www.linuxjournal.com/content/advanced-firewall-configurations-ipset
>
> In a nutshell, we have to install a module for iptables, so that it can
> use sets created by using ipset:
> sudo apt install xtables-addons-source
> sudo module-assistant auto-install xtables-addons
>
> OK - great. It still doesn't work. I must be getting closer to properly
> locking down the use of SSDP Discovery however. I don't know. Something
> else is still missing.
I'll try that.
Before doing so I did have some success last night by inserting the new
OUTPUT rule to be rule no 1. My UPnP device was then discovered, and
seemed to play but with no sound. The other weird effect was that I got
no UFW logs. I think there's some interaction between the ufw entries
for INPUT and OUTPUT and the new entries. I may have even less hair
soon.
I also note that the ipset rule disappears on a reboot. Maybe it needs
to be saved, or added each boot - I'm not sure.
To see if anything was happening I used:
Code:
--------------------
sudo ipset list upnp
sudo watch --interval=5 'iptables -nvL | grep -v "0 0"'
--------------------
The first showed me some entries created when I had the OUTPUT rule as
number 1, and the 2nd showed some real time firewall counters.
I just tried installing xtables-addons-source, and I get:
Code:
--------------------
Error in `/usr/share/doc-base/netfilter-hacking', line 9: all `Format'
sections are invalid.
Error in `/usr/share/doc-base/netfilter-extensions', line 9: all `Format'
sections are invalid.
--------------------
Only documentation, so I guess it's no problem. I'm not sure why I need
the source of the addons anyway, but I'm none too keen on a module
called ...-hacking.
On running the 2nd command I see there's a dkms module. There were a
couple of errors on the initial install of xtables-addons-modules, and
I'm not sure if that means I have to re-add it each time I get a kernel
update, but it then says that the DKMS modules "exactly matches what is
already found in kernel 4.15.0-58-generic" so maybe that's all
unnecessary.
LMS 7.9.2 on PC, Xubuntu 18.04, FLACs 16->24 bit, 44.1->192kbps. 2
Touchs & EDO.
LMS plugin UPnP/DLNA Bridge to MF M1 CLiC (A308CR amp & ESLs) & Marantz
CR603 UPnP renderers.
Also Minimserver & Upplay to same & to upmpdcli/mpd PC renderers.
Squeezelite to Meridian USB Explorer DAC to PC speakers/headphones.
Wireless Xubuntu 18.04 laptop firefox/upplay or Android 'phone with
Squeeze-Commander/BubbleUPnP controls LMS/Minimserver.
------------------------------------------------------------------------
PasTim's Profile: http://forums.slimdevices.com/member.php?userid=41642
View this thread: http://forums.slimdevices.com/showthread.php?t=103728
_______________________________________________
plugins mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/plugins
