<font size=2 face="sans-serif">No need to use the set Statement in release/expiry
again. Just look at the leases in the leases file. The set Value for </font><font size=3>ClientIP</font><font size=2 face="sans-serif">
is stored there and can be addressed again.<br>
</font>
<br>
<table width=100%>
<tr valign=top>
<td>
<td>
<tr valign=top>
<td>
<td>
<tr valign=top>
<td>
<td>
<tr valign=top>
<td>
<td>
<tr valign=top>
<td>
<td></table>
<br>
<hr noshade>
<br>
<br>
<br><font size=3>I`ve been testing that hack for a while and i found one
problem:<br>
<br>
While commit everything is ok, but on release/expiry i`m getting an error
in logs:<br>
<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 execute_statement argv[0] = /opt/dnsmasq/dhcpv2<br>
2010-10-19 13:15:23 execute_statement argv[1] = del<br>
2010-10-19 13:15:23 execute: bad arg 2<br>
2010-10-19 13:15:23 execute_statement argv[1] = del<br>
2010-10-19 13:15:23 execute: bad arg 2<br>
<br>
and script fails, because of missing ClientMAC.<br>
<br>
<br>
My config:<br>
<br>
on release {<br>
<br>
set ClientIP = binary-to-ascii(10, 8, ".", leased-address);<br>
<br>
set ClientMAC = concat (suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware,1, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
2, 1))),2),":",suffix (concat("0", binary-to-ascii
(16, 8, "", substring(hardware, 3, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
4,1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware, 5, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
6, 1))),2));<br>
<br>
execute("/opt/dnsmasq/dhcpv2", "del", clientMAC, clientIP);<br>
}<br>
<br>
on expiry {<br>
<br>
set ClientIP = binary-to-ascii(10, 8, ".", leased-address);<br>
<br>
set ClientMAC = concat (suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware,1, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
2, 1))),2),":",suffix (concat("0", binary-to-ascii
(16, 8, "", substring(hardware, 3, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
4,1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware, 5, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
6, 1))),2));<br>
<br>
execute("/opt/dnsmasq/dhcpv2", "del", clientMAC, clientIP);<br>
<br>
}<br>
<br>
Best regards,<br>
paszczus<br>
</font>
<br><font size=3>W dniu 18 października 2010 09:11 użytkownik <</font><a href=mailto:Uwe.Buchwitz@gavi.de><font size=3 color=blue><u>Uwe.Buchwitz@gavi.de</u></font></a><font size=3>>
napisał:</font>
<br><font size=2 face="sans-serif">Hello,</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
with:</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
( concat (</font><font size=3> </font><font size=2 face="sans-serif"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
1, 1))),2),":",</font><font size=3> </font><font size=2 face="sans-serif"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
2, 1))),2),":",</font><font size=3> </font><font size=2 face="sans-serif"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
3, 1))),2),":",</font><font size=3> </font><font size=2 face="sans-serif"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
4, 1))),2),":",</font><font size=3> </font><font size=2 face="sans-serif"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
5, 1))),2),":",</font><font size=3> </font><font size=2 face="sans-serif"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
6, 1))),2)</font><font size=3> </font><font size=2 face="sans-serif"><br>
),</font><font size=3><br>
</font><font size=2 face="sans-serif"><br>
you get the correct format.</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
Best regards,</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
Uwe</font><font size=3> <br>
<br>
</font>
<table width=100%>
<tr valign=top>
<td width=21%><font size=1 color=#5f5f5f face="sans-serif">Von:</font><font size=3>
</font>
<td width=78%><font size=1 face="sans-serif">Sławomir Paszkiewicz <</font><a href=mailto:paszczus@gmail.com target=_blank><font size=1 color=blue face="sans-serif"><u>paszczus@gmail.com</u></font></a><font size=1 face="sans-serif">></font><font size=3>
</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">An:</font><font size=3>
</font>
<td><a href="mailto:dhcp-hackers@lists.isc.org" target=_blank><font size=1 color=blue face="sans-serif"><u>dhcp-hackers@lists.isc.org</u></font></a><font size=3>
</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Datum:</font><font size=3>
</font>
<td><font size=1 face="sans-serif">11.10.2010 12:41</font><font size=3>
</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Betreff:</font><font size=3>
</font>
<td><font size=1 face="sans-serif">DHCP 4.0.2, execute() and hardware address
mismatch</font><font size=3> </font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Gesendet von:</font><font size=3>
</font>
<td><font size=1 face="sans-serif">dhcp-hackers-bounces+uwe.buchwitz=</font><a href=http://gavi.de/ target=_blank><font size=1 color=blue face="sans-serif"><u>gavi.de</u></font></a><font size=1 face="sans-serif">@</font><a href=http://lists.isc.org/ target=_blank><font size=1 color=blue face="sans-serif"><u>lists.isc.org</u></font></a></table>
<br><font size=3><br>
</font>
<hr noshade><font size=3><br>
<br>
</font>
<br><tt><font size=2>Hello,<br>
I`m trying to migrate from DNSMasq to ISC DHCP because of failover.<br>
My problem is that MAC Addresses (hardware) are in different format than<br>
iptables accept (i`m executing script via execute() which call iptables<br>
-A FORWARD -m mac --mac-source .... -j ACCEPT).<br>
<br>
In ISC DHCP logs format is correct:<br>
<br>
DHCPREQUEST for 10.59.146.180 from 00:d0:b8:0c:ba:d8 via eth0<br>
<br>
But 'hardware' (i`m using binary-to-ascii(16, 8, ":",<br>
substring(hardware,1, 6));) gives me:<br>
<br>
0:d0:b8:c:ba:d8 which is incorrect for iptables:<br>
<br>
# iptables -A FORWARD -m mac --mac-source 0:d0:b8:c:ba:d8 -s<br>
10.59.146.180 -j ACCEPT<br>
iptables v1.4.4: Bad mac address "0:d0:b8:c:ba:d8"<br>
<br>
My question is how to get correct (for iptables) format (same as in dhcp<br>
logs) ?<br>
<br>
Best regards,<br>
paszczus</font></tt>
<br><tt><font size=2>_______________________________________________<br>
dhcp-hackers mailing list</font></tt><tt><font size=2 color=blue><u><br>
</u></font></tt><a href="mailto:dhcp-hackers@lists.isc.org" target=_blank><tt><font size=2 color=blue><u>dhcp-hackers@lists.isc.org</u></font></tt></a>
<br><a href="https://lists.isc.org/mailman/listinfo/dhcp-hackers" target=_blank><tt><font size=2 color=blue><u>https://lists.isc.org/mailman/listinfo/dhcp-hackers</u></font></tt></a><font size=3><br>
</font>
<br><font size=3><br>
_______________________________________________<br>
dhcp-hackers mailing list</font><font size=3 color=blue><u><br>
</u></font><a href="mailto:dhcp-hackers@lists.isc.org"><font size=3 color=blue><u>dhcp-hackers@lists.isc.org</u></font></a><font size=3 color=blue><u><br>
</u></font><a href="https://lists.isc.org/mailman/listinfo/dhcp-hackers" target=_blank><font size=3 color=blue><u>https://lists.isc.org/mailman/listinfo/dhcp-hackers</u></font></a>
<br><tt><font size=2>_______________________________________________<br>
dhcp-hackers mailing list<br>
dhcp-hackers@lists.isc.org<br>
</font></tt><a href="https://lists.isc.org/mailman/listinfo/dhcp-hackers"><tt><font size=2>https://lists.isc.org/mailman/listinfo/dhcp-hackers</font></tt></a>