Closed synotester closed 3 weeks ago
The reproduction steps presume we own the same NAS, the issue is either your ipset doesnt seem to support nethash
family or the kernal module failing to load as shown in the logs
INFO: loading ipset kernel modules from /var/packages/crowdsec-firewall-bouncer/target/lib/modules/4.4.302+
ERROR: loading ipset kernel modules!
Hello,Have you launch as root @. (1$t ISPétiK in @.)On Mar 29, 2024 8:37 PM, Laurence Jones @.***> wrote: The reproduction steps presume we own the same NAS, the issue is either your ipset doesnt seem to support nethash family or the kernal module failing to load as shown in the logs INFO: loading ipset kernel modules from /var/packages/crowdsec-firewall-bouncer/target/lib/modules/4.4.302+ ERROR: loading ipset kernel modules!
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>
Hello erdoukki and thank you for your reply. I have started the crowdsec-firewall-bouncer service in the WebUI with a user who has Administor rights. As far as I know, there is no classic root user in DSM, only the option of using sudo to elevate privileges in SSH.
Here is the more detailed support script from Gerald Kerma:
Edited and wrapped in details tag due to long output
-- DS720+ has been successfully updated to version DSM 7.2.1-69057 Update 5 -- crowdsec-firewall-bouncer still cannot be started successfully -- is it possible to name a DSM version with a Synology Diskstation Model where the crowdsec-firewall-bouncer works?
Like all issues, have you read the full readme ? Have you manually installed ? have you tweak the non root privilege method ?
@crowdsecurity this issue is not a bug and can be closed
@crowdsecurity this issue is not a bug and can be closed
Since the issue been open for sometime, will class as stale and the OP can reopen if they still dont have a resolution.
In fact, my request is still valid. @erdoukki Like all issues, have you read the full readme ?
Like said, no free time to lost on this work... For now Sorry about ! If you need urgently some tweak and upgrade, I can only with sponsorship motivation... I will take care later, but cannot say when and do not want to lost more time and money for now ... Look at the code and make some advice to @Synology or @CrowdsecSecurity if you think that could help...
I will try to explain and fix what could when I need it for my own, and, as usual share the results publicly...
You may understand that since 7.x Synology locks the root privileges and the Sumo community tried to tweak it. So look at the privileges or the Synology Community SDK. If you fill it your research results it may help also someone, may be me, fix it easily, or tweak it the simplest way...
Sorry for the delay, I think that this CrowdSec is a must have, but not Synology never answer and CrowdSecurity no more finance this research, for now
Thank you Kerma for your answer. I am not a programmer myself and can only read and adapt code to a limited extent.
Since your resources are not sufficient at the moment to investigate the problem, you are welcome to close my request again.
Gesendet: Mittwoch, 14. August 2024 um 14:37 Uhr Von: "Kerma Gérald" @.> An: "crowdsecurity/spksrc-crowdsec" @.> Cc: "synotester" @.>, "Author" @.> Betreff: Re: [crowdsecurity/spksrc-crowdsec] crowdsec-firewall-bouncer Fails to Start (even after the restart) (Issue #11)
Like said, no free time to lost on this work... For now Sorry about ! If you need urgently some tweak and upgrade, I can only with sponsorship motivation... I will take care later, but cannot say when and do not want to lost more time and money for now ... Look at the code and make some advice to @Synology or @CrowdsecSecurity if you think that could help...
I will try to explain and fix what could when I need it for my own, and, as usual share the results publicly...
You may understand that since 7.x Synology locks the root privileges and the Sumo community tried to tweak it. So look at the privileges or the Synology Community SDK. If you fill it your research results it may help also someone, may be me, fix it easily, or tweak it the simplest way...
Sorry for the delay, I think that this CrowdSec is a must have, but not Synology never answer and CrowdSecurity no more finance this research, for now
— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: @.***>
Is this a new Bug?
Package Name
crowdsec-firewall-bouncer
Package Version
0.0.22
Device Model
DS720plus
Device Architecture
x86_64
Firmware Version
Version: 7.2.1-69057 Update 4
What happened?
crowdsec-firewall-bouncer Fails to Start via WebUI (even after the restart)
Reproduction steps
Install Log
Service Log
Other Logs