I`ve been testing that hack for a while and i found one problem:<br><br>While commit everything is ok, but on release/expiry i`m getting an error in logs:<br><br>2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>2010-10-19 13:15:23 data: hardware: raw packet not available<br>2010-10-19 13:15:23 data: hardware: raw packet not available<br>2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>2010-10-19 13:15:23 data: hardware: raw packet not available<br>2010-10-19 13:15:23 data: hardware: raw packet not available<br>2010-10-19 13:15:23 execute_statement argv[0] = /opt/dnsmasq/dhcpv2<br>
2010-10-19 13:15:23 execute_statement argv[1] = del<br>2010-10-19 13:15:23 execute: bad arg 2<br>2010-10-19 13:15:23 execute_statement argv[1] = del<br>2010-10-19 13:15:23 execute: bad arg 2<br><br>and script fails, because of missing ClientMAC.<br>
<br><br>My config:<br><br>on release {<br><br>set ClientIP = binary-to-ascii(10, 8, ".", leased-address);<br><br>set
ClientMAC = concat (suffix (concat ("0", binary-to-ascii (16, 8, "",
substring(hardware,1, 1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware, 2, 1))),2),":",suffix (concat("0",
binary-to-ascii (16, 8, "", substring(hardware, 3, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
4,1))),2),":",suffix (concat ("0", binary-to-ascii (16, 8, "",
substring(hardware, 5, 1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "",substring(hardware, 6, 1))),2));<br>
<br>execute("/opt/dnsmasq/dhcpv2", "del", clientMAC, clientIP);<br>}<br><br>on expiry {<br><br>set ClientIP = binary-to-ascii(10, 8, ".", leased-address);<br><br>set
ClientMAC = concat (suffix (concat ("0", binary-to-ascii (16, 8, "",
substring(hardware,1, 1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware, 2, 1))),2),":",suffix (concat("0",
binary-to-ascii (16, 8, "", substring(hardware, 3, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
4,1))),2),":",suffix (concat ("0", binary-to-ascii (16, 8, "",
substring(hardware, 5, 1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "",substring(hardware, 6, 1))),2));<br>
<br>execute("/opt/dnsmasq/dhcpv2", "del", clientMAC, clientIP);<br><br>}<br><br>Best regards,<br>paszczus<br><br><div class="gmail_quote">W dniu 18 października 2010 09:11 użytkownik <span dir="ltr"><<a href="mailto:Uwe.Buchwitz@gavi.de">Uwe.Buchwitz@gavi.de</a>></span> napisał:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><font face="sans-serif" size="2">Hello,</font>
<br>
<br><font face="sans-serif" size="2">with:</font>
<br>
<br><font face="sans-serif" size="2"> (
concat (</font>
<br><font face="sans-serif" size="2">
suffix (concat ("0",
binary-to-ascii (16, 8, "",substring(hardware, 1, 1))),2),":",</font>
<br><font face="sans-serif" size="2">
suffix (concat ("0",
binary-to-ascii (16, 8, "",substring(hardware, 2, 1))),2),":",</font>
<br><font face="sans-serif" size="2">
suffix (concat ("0",
binary-to-ascii (16, 8, "",substring(hardware, 3, 1))),2),":",</font>
<br><font face="sans-serif" size="2">
suffix (concat ("0",
binary-to-ascii (16, 8, "",substring(hardware, 4, 1))),2),":",</font>
<br><font face="sans-serif" size="2">
suffix (concat ("0",
binary-to-ascii (16, 8, "",substring(hardware, 5, 1))),2),":",</font>
<br><font face="sans-serif" size="2">
suffix (concat ("0",
binary-to-ascii (16, 8, "",substring(hardware, 6, 1))),2)</font>
<br><font face="sans-serif" size="2">
),<br>
</font>
<br><font face="sans-serif" size="2">you get the correct format.</font>
<br>
<br><font face="sans-serif" size="2">Best regards,</font>
<br>
<br><font face="sans-serif" size="2">Uwe</font>
<br>
<br>
<br>
<table width="100%">
<tbody><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Von:</font>
</td><td><div class="im"><font face="sans-serif" size="1">Sławomir Paszkiewicz <<a href="mailto:paszczus@gmail.com" target="_blank">paszczus@gmail.com</a>></font>
</div></td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">An:</font>
</td><td><div class="im"><font face="sans-serif" size="1"><a href="mailto:dhcp-hackers@lists.isc.org" target="_blank">dhcp-hackers@lists.isc.org</a></font>
</div></td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Datum:</font>
</td><td><font face="sans-serif" size="1">11.10.2010 12:41</font>
</td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Betreff:</font>
</td><td><font face="sans-serif" size="1">DHCP 4.0.2, execute() and hardware address
mismatch</font>
</td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Gesendet von:</font>
</td><td><font face="sans-serif" size="1">dhcp-hackers-bounces+uwe.buchwitz=<a href="http://gavi.de" target="_blank">gavi.de</a>@<a href="http://lists.isc.org" target="_blank">lists.isc.org</a></font></td></tr></tbody></table>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size="2"><div><div></div><div class="h5">Hello,<br>
I`m trying to migrate from DNSMasq to ISC DHCP because of failover.<br>
My problem is that MAC Addresses (hardware) are in different format than<br>
iptables accept (i`m executing script via execute() which call iptables<br>
-A FORWARD -m mac --mac-source .... -j ACCEPT).<br>
<br>
In ISC DHCP logs format is correct:<br>
<br>
DHCPREQUEST for 10.59.146.180 from 00:d0:b8:0c:ba:d8 via eth0<br>
<br>
But 'hardware' (i`m using binary-to-ascii(16, 8, ":",<br>
substring(hardware,1, 6));) gives me:<br>
<br>
0:d0:b8:c:ba:d8 which is incorrect for iptables:<br>
<br>
# iptables -A FORWARD -m mac --mac-source 0:d0:b8:c:ba:d8 -s<br>
10.59.146.180 -j ACCEPT<br>
iptables v1.4.4: Bad mac address "0:d0:b8:c:ba:d8"<br>
<br>
My question is how to get correct (for iptables) format (same as in dhcp<br>
logs) ?<br>
<br>
Best regards,<br>
paszczus<br></div></div><div class="im">
_______________________________________________<br>
dhcp-hackers mailing list<br>
<a href="mailto:dhcp-hackers@lists.isc.org" target="_blank">dhcp-hackers@lists.isc.org</a><br>
</div></font></tt><div><div></div><div class="h5"><a href="https://lists.isc.org/mailman/listinfo/dhcp-hackers" target="_blank"><tt><font size="2">https://lists.isc.org/mailman/listinfo/dhcp-hackers</font></tt></a><tt><font size="2"><br>
</font></tt>
<br></div></div><br>_______________________________________________<br>
dhcp-hackers mailing list<br>
<a href="mailto:dhcp-hackers@lists.isc.org">dhcp-hackers@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-hackers" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-hackers</a><br></blockquote></div><br>