Setup-Raspi-Mobile - Revision history

Admin: /* Interesting commands */

2022-04-13T20:45:03Z

Interesting commands

← Older revision		Revision as of 20:45, 13 April 2022
Line 671:		Line 671:
	*iwlist wlan0 scan \| grep Frequency \| sort \| uniq -c \| sort -n		*iwlist wlan0 scan \| grep Frequency \| sort \| uniq -c \| sort -n

			Systemctl
			*systemctl cat service
			*systemctl cat rc-local.service
			*systemd-analyze blame
			*systemd-analyze time

	=Known Problems=		=Known Problems=

Admin: /* Beta OpenVPN */

2022-04-04T17:51:31Z

Beta OpenVPN

← Older revision		Revision as of 17:51, 4 April 2022
Line 559:		Line 559:

	=Beta OpenVPN=		=Beta OpenVPN=
	'''Check ~~fro~~ Update 2022'''		'''Check from Update 2022'''
	*Script to alternate interface - etc/openvpn/ovpn2nft.pl		*Script to alternate interface - etc/openvpn/ovpn2nft.pl
	#!/bin/perl		#!/bin/perl

Admin: /* Beta OpenVPN */

2022-03-18T19:08:05Z

Beta OpenVPN

← Older revision		Revision as of 19:08, 18 March 2022
Line 559:		Line 559:

	=Beta OpenVPN=		=Beta OpenVPN=
			'''Check fro Update 2022'''
	*Script to alternate interface - etc/openvpn/ovpn2nft.pl		*Script to alternate interface - etc/openvpn/ovpn2nft.pl
	#!/bin/perl		#!/bin/perl

Admin: /* NFT */

2022-03-18T19:07:30Z

NFT

← Older revision		Revision as of 19:07, 18 March 2022
Line 197:		Line 197:

	=NFT=		=NFT=
			'''Check fro Update 2022'''
	*/etc/nftables.conf		*/etc/nftables.conf

Admin: /* INIT */

2022-03-18T19:07:12Z

INIT

← Older revision		Revision as of 19:07, 18 March 2022
Line 167:		Line 167:

	=INIT=		=INIT=
			'''Check fro Update 2022'''
	*/etc/systemd/system/rbinit.service		*/etc/systemd/system/rbinit.service
	[Unit]		[Unit]

Admin: /* INIT */

2022-03-18T19:05:12Z

INIT

← Older revision		Revision as of 19:05, 18 March 2022
Line 183:		Line 183:
	#!/bin/bash		#!/bin/bash
	#Workaround for Ipdads		#Workaround for Ipdads
			logger "rbinit set if"
	/sbin/ip addr add 192.168.5.1/24 dev eth0:0		/sbin/ip addr add 192.168.5.1/24 dev eth0:0
	#~~Not~~ needed as ~~nft~~ loads at startup		#not needed as nftables loads at startup
	#/sbin/nft -f /etc/nftables.conf		#/sbin/nft -f /etc/nftables.conf
			logger "rbinit start openvpn"
			systemctl start openvpn

	*Apply the new init script		*Apply the new init script

Admin: /* INIT */

2022-03-18T19:04:20Z

INIT

← Older revision		Revision as of 19:04, 18 March 2022
Line 170:		Line 170:
	[Unit]		[Unit]
	Description=RaspiMobile Init Script		Description=RaspiMobile Init Script
	After=network.target		#After=network.target
			After=hostapd.service

	[Service]		[Service]

Admin: /* Beta OpenVPN */

2022-03-18T17:13:12Z

Beta OpenVPN

← Older revision		Revision as of 17:13, 18 March 2022
Line 553:		Line 553:

	=Beta OpenVPN=		=Beta OpenVPN=
	*Script to alternate interface		*Script to alternate interface - etc/openvpn/ovpn2nft.pl
	#!/bin/perl		#!/bin/perl
	#Script to alternate the nft POSTROUTING chain between eth0 and tun0. The script is used together with OpenVPN.		#Script to alternate the nft POSTROUTING chain between eth0 and tun0. The script is used together with OpenVPN.
Line 609:		Line 609:
	`$logger`;		`$logger`;
	}		}

			To be used in client conf of openvpn:
			script-security 2
			up "/etc/openvpn/ovpn2nft.pl up"
			down "/etc/openvpn/ovpn2nft.pl down"

	=Model3 vs Model4=		=Model3 vs Model4=

Admin: /* Beta OpenVPN */

2022-03-18T17:11:48Z

Beta OpenVPN

← Older revision		Revision as of 17:11, 18 March 2022
Line 553:		Line 553:

	=Beta OpenVPN=		=Beta OpenVPN=
	*~~Need NFT~~		*Script to alternate interface
	~~table~~ ip nat {		#!/bin/perl
	~~chain PREROUTING~~ {		#Script to alternate the nft POSTROUTING chain between eth0 and tun0. The script is used together with OpenVPN.
	~~type nat hook prerouting priority -100~~; ~~policy accept~~;		#Arg up : delete eth0 and set tun0 to be masquerading
	}		#Arg down : delete tun0 and set eth0 to be masquerading
			use strict;
			my $mode = $ARGV[0];
			my $ethArg="oif \"eth0\"";
			my $nftlistcmd="/sbin/nft -a list chain ip nat POSTROUTING";
			my $nftdeletecmd="/sbin/nft delete rule ip nat POSTROUTING handle ";
			my $nftaddTun="/sbin/nft add rule nat POSTROUTING oif tun0 counter masquerade comment \\\"Masq for tun0\\\"";
			my $nftReset="/sbin/nft -f /etc/nftables.conf";
			#my $id=`id`;
			#syslog("Check nft along openvpn, mode: $mode id: $id");
			if (uc($mode) eq "UP") {
			my @nflist = `$nftlistcmd`;
			foreach (@nflist) {
			chomp;
			#syslog ("DEB $_");
			if (/$ethArg.*handle (\d+)/){
			$nftdeletecmd.="$1";
			syslog("Found and delete eth0 rule on handle $1");
			my $nftret=`$nftdeletecmd`;
			if ($nftret) {
			syslog ("Error $nftret");
			exit 1;
			}
			syslog("Set tun0 rule");
			my $nftret=`$nftaddTun`;
			if ($nftret) {
			syslog ("Error $nftret");
			exit 1;
			}
			exit 0;
			} #if (/$ethArg.*handle (\d+)/)
			} #foreach (@nflist) {
			} #if (uc($mode) eq "UP")

	~~chain INPUT {~~
	~~type nat hook input priority 100; policy accept;~~
	}

	~~chain POSTROUTING~~ {		if (uc($mode) eq "DOWN") {
	~~type nat hook postrouting priority 100~~; ~~policy accept~~;		syslog ("Reset nft");
	~~iifname~~ "~~eth0" counter oifname "tun0" masquerade comment "masq for eth0~~"		my $nftret=`$nftReset`;
	~~iifname "tun0" counter oifname "tun0" masquerade comment "masq for eth0"~~		if ($nftret) {
	~~iifname "wlan0" counter oifname "tun0" masquerade~~ ~~comment~~ "~~masq for eth0~~"		syslog ("Error $nftret");
	}		exit 1;
			}
			} #if (uc($mode) eq "DOWN")

	~~chain OUTPUT {~~
	~~type nat hook output priority -100; policy accept;~~
	}
			sub syslog {
	*Neet openvpn add on		#print "$_[0]\n";
	~~auth-user-pass /etc/openvpn/login.conf~~		my $logger="logger \"($0) NFT $_[0]\"";
	#~~route~~ 0.0~~.0.0 0.0.0.~~0		`$logger`;
	~~log /var/log/openvpn.log~~		}
	~~verb 6~~
	~~redirect-gateway autolocal~~


	=Model3 vs Model4=		=Model3 vs Model4=

Admin: /* Optional keepalive logging */

2022-03-12T19:25:17Z

Optional keepalive logging

← Older revision		Revision as of 19:25, 12 March 2022
Line 328:		Line 328:

	=Optional keepalive logging=		=Optional keepalive logging=
	*This is simple logging script to see if the device is up and write into ~~syslog~~		*This is simple logging script to see if the device is up and write into a log, used eg for battery live testing.
	root@raspberrypi:/# cat /home//pi/rbkeepalive.sh		root@raspberrypi:/# cat /home//pi/rbkeepalive.sh
	#!/bin/bash		#!/bin/bash