freifunk-dresden / ffdd-server Goto Github PK

Mit Wireguard update auf Version 1.0.x geht das ping Antwort packet über vpn0 raus.
Wenn ping über Internet kommt ping aus dem Freifunk netzt läuft.

Bei der Installation auf einem neuen System bekomme ich den folgenden Fehler bei der Ausführung des Commands salt-call state.highstate --local, welches im Installationskript steht:

Traceback (most recent call last):
  File "/usr/bin/salt-call", line 11, in <module>
    salt_call()
  File "/usr/lib/python3/dist-packages/salt/scripts.py", line 386, in salt_call
    import salt.cli.call
  File "/usr/lib/python3/dist-packages/salt/cli/call.py", line 9, in <module>
    import salt.cli.caller
  File "/usr/lib/python3/dist-packages/salt/cli/caller.py", line 18, in <module>
    import salt.loader
  File "/usr/lib/python3/dist-packages/salt/loader.py", line 26, in <module>
    import salt.utils.event
  File "/usr/lib/python3/dist-packages/salt/utils/event.py", line 74, in <module>
    import salt.payload
  File "/usr/lib/python3/dist-packages/salt/payload.py", line 17, in <module>
    import salt.crypt
  File "/usr/lib/python3/dist-packages/salt/crypt.py", line 54, in <module>
    import salt.utils.rsax931
  File "/usr/lib/python3/dist-packages/salt/utils/rsax931.py", line 85, in <module>
    libcrypto = _init_libcrypto()
  File "/usr/lib/python3/dist-packages/salt/utils/rsax931.py", line 76, in _init_libcrypto
    raise OSError("Failed to initialize OpenSSL library (OPENSSL_init_crypto failed)")
OSError: Failed to initialize OpenSSL library (OPENSSL_init_crypto failed)

Genutzt habe ich ein frisch installiertes Ubuntu 18.10.

ref issue on bmxd:
Freifunk-Dresden/ffdd-bmxd#1

ein configfile /etc/wireguard-backbone.conf wäre cool, um:

• filenamen / pfade
• wg_restrict
• timeouts / löschzeiten usw.
• white/blacklists (wenn vorhanden)

zu konfigurieren.
Also so viel wie möglich via config file konfigurierbar machen, evt mit kommentaren im conf file, welche alle optionen und deren werte beschreiben.

Server Version 1.3.0
TCPdump zeit auf der host Maschine für die ip packete:

Proxmox-VE ~ # tcpdump host 10.64.106.247 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp5s0, link-type EN10MB (Ethernet), capture size 262144 bytes 10:41:21.044180 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 10:41:21.044250 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 10:41:21.044319 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 10:41:21.044348 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 10:41:21.044382 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 10:41:21.044391 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 10:41:21.045158 IP 10.64.106.247.48262 > d90-130-70-73.cust.tele2.se.http: Flags [R], seq 1372333260, win 0, length 0 ^C 7 packets captured

mit vpn7 ist es genau so. bei den anderen hatte ich auf die schnelle nicht geschaut.

Hetzner hat mir daraufhin eine IP gesperrt weil ich packete für private ips versucht habe da drüber zu schicken.

Weitere Info:

Err:11 http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic InRelease                            
  403  Forbidden [IP: 91.189.95.83 80]

~ > lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 18.04.5 LTS
Release:	18.04
Codename:	bionic

~ > cat /etc/apt/sources.list.d/wireguard-ubuntu-wireguard-bionic.list
deb http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic main
# deb-src http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic main

..

check we can optimize fastd2 build process:

                 Cloning into 'libuecc'...
                  fatal: not a git repository (or any of the parent directories): .git
                  Cloning into 'fastd'...
                  fatal: not a git repository (or any of the parent directories): .git
                  CMake Warning:
                    Manually-specified variables were not used by the project:
                  
                      WITH_VERIFY
                  
                  
                  config.y:29.1-28: warning: deprecated directive, use '%define api.prefix {fastd_config_}' [-Wdeprecated]
                   %name-prefix "fastd_config_"
                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
                  config.y: warning: fix-its can be applied.  Rerun with option '--update'. [-Wother]
                  In function 'notify_systemd',
                      inlined from 'init' at /usr/local/src/fastd/fastd/src/fastd.c:552:2,
                      inlined from 'main' at /usr/local/src/fastd/fastd/src/fastd.c:697:2:
                  /usr/local/src/fastd/fastd/src/fastd.c:424:2: warning: 'strncpy' specified bound 108 equals destination size [-Wstringop-truncation]
                    strncpy(sa.sun_path, notify_socket, sizeof(sa.sun_path));
                    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                  /usr/local/src/fastd/fastd/src/iface.c: In function 'fastd_iface_open':
                  /usr/local/src/fastd/fastd/src/iface.c:541:52: warning: 'snprintf' output may be truncated before the last format character [-Wformat-truncation=]
                        snprintf(ifnamebuf, sizeof(ifnamebuf), "%s%s%s", prefix, buf, percent+2);
                                                                      ^
                  /usr/local/src/fastd/fastd/src/iface.c:541:6: note: 'snprintf' output 1 or more bytes (assuming 17) into a destination of size 16
                        snprintf(ifnamebuf, sizeof(ifnamebuf), "%s%s%s", prefix, buf, percent+2);
                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~