yinkai1205 / droidwall

Automatically exported from code.google.com/p/droidwall
0 stars 0 forks source link

Selected iptables rules are not automatically applied/restored on reboot. #35

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Select any settings as desired.
2. Apply rules and start firewall; everything works fine by then.
3. Reboot

What is the expected output? What do you see instead?

Firewall is still active, but iptables rules is no set (empty list).
To restore the selected filtering, I have to hit "Apply rules".

What version of the product are you using? On what operating system?

Droid Wall v1.3.8-dev on HTC Desire running Android 2.2

Please provide any additional information below.

This might be due to Droid Wall not gaining root privilege on reboot, as 
suggested at
http://android.modaco.com/content/htc-hero-hero-modaco-com/299310/problem-with-d
roidwall-solved-solution-inside/#entry8
but the workaround given there wrt. Autostarts did not work for me
(at least when using Startup Manager instead of Autostarts).

Yet here is my workaround: add Droid Wall to the "Customize" list of Startup 
Manager.
In this way, after reboot, at least I do not forget to hit "Apply Rules".

Original issue reported on code.google.com by DvO...@gmail.com on 13 Aug 2010 at 6:27

GoogleCodeExporter commented 9 years ago
I have reports from other HTC Desire users that this is now working after 
updating to CyanogenMod 6.0
This looks like a problem with old Super User PErmissions.

Original comment by rodrigo...@gmail.com on 6 Sep 2010 at 7:28

GoogleCodeExporter commented 9 years ago
Thanks for your hint. On my HTC Desire, Superuser 2.2.2 is installed, and all 
attempts 
at installing a newer version (including 'pm uninstall 
com.noshufou.android.su') failed.
Even after restoring the original shell /system/bin/sh, also with version 1.4.2,
I still have this problem. After reboot, iptables -L on the shell indicates an 
empty table:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

When I hit "Show rules" on Droidwall, 
/data/data7com.googlecode.droidwall/cache/iptables_n1
outputs the number of packets and bytes transmitted, and then the output ceases 
by

[1] Segmentation fault  /data/data/com/g...

The filtering by Droidwall becomes active only after I manually hit "Apply 
rules".
This involves automatically obtaining superuser rights, and after that "Show 
rules"
gives the correct list of rules, though still followed by the truncated error 
message

[1] Segmentation fault  /data/data/com/g...

Original comment by DvO...@gmail.com on 11 Oct 2010 at 6:41