iptables error

This forum is for topics dealing with problems with software specifically in the ARMv7h repo.

iptables error

Postby jbodhorn » Mon Dec 11, 2017 4:31 am

I'm running arch arm on my odroid-xu4, one of the things I have it set up for is to share it's wired internet through a usb 3 ethernet adapter. I was using ssh today and the connection was very laggy, then I notice that this error popped up on the odroid's screen:
$this->bbcode_second_pass_code('', '
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
')

Here are my iptables:
$this->bbcode_second_pass_code('', '
# Generated by iptables-save v1.6.0 on Tue Jul 5 21:35:37 2016
*raw
:PREROUTING ACCEPT [12821478:44461877472]
:OUTPUT ACCEPT [7119537:24076684137]
COMMIT
# Completed on Tue Jul 5 21:35:37 2016
# Generated by iptables-save v1.6.0 on Tue Jul 5 21:35:37 2016
*mangle
:PREROUTING ACCEPT [12821478:44461877472]
:INPUT ACCEPT [12775807:44459539161]
:FORWARD ACCEPT [217:61479]
:OUTPUT ACCEPT [7119537:24076684137]
:POSTROUTING ACCEPT [7124142:24077463056]
COMMIT
# Completed on Tue Jul 5 21:35:37 2016
# Generated by iptables-save v1.6.0 on Tue Jul 5 21:35:37 2016
*nat
:PREROUTING ACCEPT [61852:4576410]
:INPUT ACCEPT [16386:2298934]
:OUTPUT ACCEPT [3602:499700]
:POSTROUTING ACCEPT [801:100392]
-A POSTROUTING -o net0 -j MASQUERADE
COMMIT
# Completed on Tue Jul 5 21:35:37 2016
# Generated by iptables-save v1.6.0 on Tue Jul 5 21:35:37 2016
*filter
:INPUT ACCEPT [104:25867]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [40:3655]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A FORWARD -i net1 -o net0 -j ACCEPT
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Tue Jul 5 21:35:37 2016
')

I was having some issues a couple weeks ago with an unstable connection when using the shared wired connection to send files to the odroid from my laptop, could this be why? I have no idea what I'm doing with iptables, the only reason I ever got this working in the first place was because I had found a list of commands to set up the forwarding, I think those rules were from a write-up about sharing a raspberry pi's internet connection
jbodhorn
 
Posts: 41
Joined: Wed Dec 16, 2015 2:22 am

Return to ARMv7h

Who is online

Users browsing this forum: No registered users and 6 guests