Yeah! Now it works fine and leases file looks much better :)<br><br>Thank you Uwe!<br><br><div class="gmail_quote">W dniu 19 października 2010 20:44 użytkownik <span dir="ltr"><<a href="mailto:Uwe.Buchwitz@gavi.de">Uwe.Buchwitz@gavi.de</a>></span> napisał:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><font face="sans-serif" size="2">No need to use the set Statement in release/expiry
again. Just look at the leases in the leases file. The set Value for </font><font size="3">ClientIP</font><font face="sans-serif" size="2">
is stored there and can be addressed again.<br>
</font>
<br>
<table width="100%">
<tbody><tr valign="top">
<td>
</td><td>
</td></tr><tr valign="top">
<td>
</td><td>
</td></tr><tr valign="top">
<td>
</td><td>
</td></tr><tr valign="top">
<td>
</td><td>
</td></tr><tr valign="top">
<td>
</td><td></td></tr></tbody></table>
<br>
<hr noshade>
<br>
<br>
<br><font size="3">I`ve been testing that hack for a while and i found one
problem:<br>
<br>
While commit everything is ok, but on release/expiry i`m getting an error
in logs:<br>
<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 data: hardware: raw packet not available<br>
2010-10-19 13:15:23 execute_statement argv[0] = /opt/dnsmasq/dhcpv2<br>
2010-10-19 13:15:23 execute_statement argv[1] = del<br>
2010-10-19 13:15:23 execute: bad arg 2<br>
2010-10-19 13:15:23 execute_statement argv[1] = del<br>
2010-10-19 13:15:23 execute: bad arg 2<br>
<br>
and script fails, because of missing ClientMAC.<br>
<br>
<br>
My config:<br>
<br>
on release {<br>
<br>
set ClientIP = binary-to-ascii(10, 8, ".", leased-address);<br>
<br>
set ClientMAC = concat (suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware,1, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
2, 1))),2),":",suffix (concat("0", binary-to-ascii
(16, 8, "", substring(hardware, 3, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
4,1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware, 5, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
6, 1))),2));<br>
<br>
execute("/opt/dnsmasq/dhcpv2", "del", clientMAC, clientIP);<br>
}<br>
<br>
on expiry {<br>
<br>
set ClientIP = binary-to-ascii(10, 8, ".", leased-address);<br>
<br>
set ClientMAC = concat (suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware,1, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
2, 1))),2),":",suffix (concat("0", binary-to-ascii
(16, 8, "", substring(hardware, 3, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "", substring(hardware,
4,1))),2),":",suffix (concat ("0", binary-to-ascii
(16, 8, "", substring(hardware, 5, 1))),2),":",suffix
(concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
6, 1))),2));<br>
<br>
execute("/opt/dnsmasq/dhcpv2", "del", clientMAC, clientIP);<br>
<br>
}<br>
<br>
Best regards,<br>
paszczus<br>
</font>
<br><font size="3">W dniu 18 października 2010 09:11 użytkownik <</font><a href="mailto:Uwe.Buchwitz@gavi.de" target="_blank"><font color="blue" size="3"><u>Uwe.Buchwitz@gavi.de</u></font></a><font size="3">>
napisał:</font>
<br><font face="sans-serif" size="2">Hello,</font><font size="3"> <br>
</font><font face="sans-serif" size="2"><br>
with:</font><font size="3"> <br>
</font><font face="sans-serif" size="2"><br>
( concat (</font><font size="3"> </font><font face="sans-serif" size="2"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
1, 1))),2),":",</font><font size="3"> </font><font face="sans-serif" size="2"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
2, 1))),2),":",</font><font size="3"> </font><font face="sans-serif" size="2"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
3, 1))),2),":",</font><font size="3"> </font><font face="sans-serif" size="2"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
4, 1))),2),":",</font><font size="3"> </font><font face="sans-serif" size="2"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
5, 1))),2),":",</font><font size="3"> </font><font face="sans-serif" size="2"><br>
suffix (concat ("0", binary-to-ascii (16, 8, "",substring(hardware,
6, 1))),2)</font><font size="3"> </font><font face="sans-serif" size="2"><br>
),</font><font size="3"><br>
</font><font face="sans-serif" size="2"><br>
you get the correct format.</font><font size="3"> <br>
</font><font face="sans-serif" size="2"><br>
Best regards,</font><font size="3"> <br>
</font><font face="sans-serif" size="2"><br>
Uwe</font><font size="3"> <br>
<br>
</font>
<table width="100%">
<tbody><tr valign="top">
<td width="21%"><font color="#5f5f5f" face="sans-serif" size="1">Von:</font><font size="3">
</font>
</td><td width="78%"><font face="sans-serif" size="1">Sławomir Paszkiewicz <</font><a href="mailto:paszczus@gmail.com" target="_blank"><font color="blue" face="sans-serif" size="1"><u>paszczus@gmail.com</u></font></a><font face="sans-serif" size="1">></font><font size="3">
</font>
</td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">An:</font><font size="3">
</font>
</td><td><a href="mailto:dhcp-hackers@lists.isc.org" target="_blank"><font color="blue" face="sans-serif" size="1"><u>dhcp-hackers@lists.isc.org</u></font></a><font size="3">
</font>
</td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Datum:</font><font size="3">
</font>
</td><td><font face="sans-serif" size="1">11.10.2010 12:41</font><font size="3">
</font>
</td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Betreff:</font><font size="3">
</font>
</td><td><font face="sans-serif" size="1">DHCP 4.0.2, execute() and hardware address
mismatch</font><font size="3"> </font>
</td></tr><tr valign="top">
<td><font color="#5f5f5f" face="sans-serif" size="1">Gesendet von:</font><font size="3">
</font>
</td><td><font face="sans-serif" size="1">dhcp-hackers-bounces+uwe.buchwitz=</font><a href="http://gavi.de/" target="_blank"><font color="blue" face="sans-serif" size="1"><u>gavi.de</u></font></a><font face="sans-serif" size="1">@</font><a href="http://lists.isc.org/" target="_blank"><font color="blue" face="sans-serif" size="1"><u>lists.isc.org</u></font></a></td>
</tr></tbody></table>
<br><font size="3"><br>
</font>
<hr noshade><font size="3"><br>
<br>
</font>
<br><tt><font size="2">Hello,<br>
I`m trying to migrate from DNSMasq to ISC DHCP because of failover.<br>
My problem is that MAC Addresses (hardware) are in different format than<br>
iptables accept (i`m executing script via execute() which call iptables<br>
-A FORWARD -m mac --mac-source .... -j ACCEPT).<br>
<br>
In ISC DHCP logs format is correct:<br>
<br>
DHCPREQUEST for 10.59.146.180 from 00:d0:b8:0c:ba:d8 via eth0<br>
<br>
But 'hardware' (i`m using binary-to-ascii(16, 8, ":",<br>
substring(hardware,1, 6));) gives me:<br>
<br>
0:d0:b8:c:ba:d8 which is incorrect for iptables:<br>
<br>
# iptables -A FORWARD -m mac --mac-source 0:d0:b8:c:ba:d8 -s<br>
10.59.146.180 -j ACCEPT<br>
iptables v1.4.4: Bad mac address "0:d0:b8:c:ba:d8"<br>
<br>
My question is how to get correct (for iptables) format (same as in dhcp<br>
logs) ?<br>
<br>
Best regards,<br>
paszczus</font></tt>
<br><tt><font size="2">_______________________________________________<br>
dhcp-hackers mailing list</font></tt><tt><font color="blue" size="2"><u><br>
</u></font></tt><a href="mailto:dhcp-hackers@lists.isc.org" target="_blank"><tt><font color="blue" size="2"><u>dhcp-hackers@lists.isc.org</u></font></tt></a>
<br><a href="https://lists.isc.org/mailman/listinfo/dhcp-hackers" target="_blank"><tt><font color="blue" size="2"><u>https://lists.isc.org/mailman/listinfo/dhcp-hackers</u></font></tt></a><br></blockquote></div>