Applying and listing rules fails due to missing [ (test) on Samsung's Galaxy S I9000 about droidwall HOT 21 CLOSED

Firmware 2.1-update1

Wow, I assumed that "test" would be available everywhere.
I will try to fix it for the next release.

Hello, can you please test the attached development version to see if it works 
for you now?

Please post the results here on this issue.
Thanks

Hi,
tested it and works fine. Interesting solution though.

Cheers

I received some feedback from other users that don't have the "which" command, 
so this solution doesn't work for them! gosh
I did a much simpler verification script now. This one should work for everyone 
since it doesn't depend on any external commands.
If you could test the attached version too, I would appreciate. Thanks

[deleted comment]

Tried droidwall on a soft-rooted HTC Wildfire, get the same "[: not found" 
error as vdtick1111 with standard release. Dev. release above solved that 
error, but gave way to some other errors. I get long error messages when I 
whitelist items. Even if it says the rules were saved without any error 
messages the firewall doesnt seem to be working. All apps can still access the 
internet even thoufh they're not whitelisted... Love the program, hope it'll 
work on a wildfire soon.

Just to give an example When i whitelist for wifi: (Any application) and for 
3G: just ASTRO file manager, it shows me:

Error applying iptables rules.
Exit code: 1
iptables v1.4.7
iptables v1.4.7
Chain droidwall (33
references)
target  prot opt source
destination
grep: not found
iptables: No chain/target/
match by that name.

On further experimenting it seems that "(any application) - same as selecting 
all applications" is the only checkmark that works. If I actually do check all 
apps separately, or even one, It won't work. 

Sorry, but these new errors means that your kernel was not compiled with the 
necessary netfilter owner module.
It is not possible to make Droid Wall work on such kernel, so there is nothing 
more that I can do.

The original error, caused by the lack of a "[" command, has been fixed. Some 
users which had the same error reported that this dev version works for them so 
I am considering this as closed.

Sorry, to spoil ...

I tested your last solution on my device.
I now get:
[2] Segmentation fault ${IPTABLES} --ve...

The reason for this seems to be (wild guess :) that your method to avoid test/[ 
isn't working.
I've tested it by inserting exit 0 after $IPTABLES is set in droidwall.sh.
# sh -x droidwall.sh
+ export IPTABLES=iptables
+ /data/data/com.googlecode.droidwall/cache/iptables_g1 --version
+
+ export IPTABLES=/data/data/com.googlecode.droidwall/cache/iptables_g1
+ echo Value of IPTABLES: /data/data/com.googlecode.droidwall/cache/iptables_g1
Value of IPTABLES: /data/data/com.googlecode.droidwall/cache/iptables_g1
+ exit 0

iptables_g1 throws the segmentation fault signal on my device, that probably 
prevents your code from working

When I delete "&" in your output redirection I get this:
+ export IPTABLES=iptables
+ /data/data/com.googlecode.droidwall/cache/iptables_g1 --version
[1]   Segmentation fault      /data/data/com.g...
+ /data/data/com.googlecode.droidwall/cache/iptables_n1 --version
+
+ export IPTABLES=/data/data/com.googlecode.droidwall/cache/iptables_n1
+ echo Value of IPTABLES: /data/data/com.googlecode.droidwall/cache/iptables_n1
Value of IPTABLES: /data/data/com.googlecode.droidwall/cache/iptables_n1
+ exit 0
# iptables v1.4.7

But at least the right iptables is selected!

Second thing is more of a syntax issue. I get a line in droidwall.sh like this:
$IPTABLES -F droidwall || exit 4$IPTABLES -A droidwall -o rmnet+ -m owner 
--uid-owner 10084 -j RETURN || exit

Should there be a CR after exit 4?

Cheers,

vdtick1111,
Thanks for letting me know that. It is possible that the "&>/dev/null" 
redirection does not work on some phones (probably due to a simpler shell).
I also fixed the lack of CR on that line.

Could you please test the attached version?
Thanks

Ah  I'm sorry, I thought my issue was the same, didn't mean to hijack the 
topic... Any chance Droidwall will ever be released for the Wildfire. I'm not 
above donating...^_^

Hip hip hurray.
It seems to work now. Funny that &> is different from > 2>.
Cheers

Great! Thank you for the debugging work ;)

@rodrigo, i installed the version from comment #12, now when I make show rules 
it works longer and i get a diferent error message:

/data/data/com.googlecode.droidwall/cache/iptables_n1 
Chain INPUT (policy ACCEPT 2377K packet, 3315M bytes)
pkts bytes target   prot opt in  
out source
destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in
out source
destination

Chain OUTPUT (policy ACCEPT 1108K packes, 52M bytes)
pkts bytes target prot opt in
out source
destination
grep: not found
which: not found
[1] Segmentaion fault / data/data/com.g...

and here the box ends. Can I verify something on the phone?

@samichlaus, you may try the latest development version (attached) - this 
version attempts to find "grep" automatically in the system, instead of 
assuming that it is available in the path.
Please let me know if it works for you. Thanks

The latest dev. version just works fine. Great job. Grats and Thanks.

[deleted comment]

just had an issue with not finding grep. Fixed by installing busybox. Now got a 
new error asking about insmod? Im using a LG GT540 on 1.6 V10D

Next version will include a simple busybox built-in, so installing busybox 
won't be necessary anymore :)

Now, for this "insmod" error - this means that your kernel was not compiled 
with netfilter support. Sorry, but your ROM cannot run Droid Wall.