<div dir="ltr"><div><div>Yes, i am sure the ipset main function is working:<br><br><i>[RT-N56U:/opt/home/admin]$ ipset -H<br>ipset v6.19<br>.......<br><br></i></div><i>and:<br></i><i><br>[RT-N56U:/opt/home/admin]$ ipset -L gfwlist<br>
Name: gfwlist<br>Type: hash:ip<br>Revision: 1<br>Header: family inet hashsize 1024 maxelem 65536<br>Size in memory: 8264<br>References: 1<br>Members:</i><br><div class="gmail_extra"><br></div><div class="gmail_extra">I found something, but i'm not sure it is worse to think:<br>
<br></div><div class="gmail_extra">On my other router that running
Tomato firmware(ipset v4.5 and Linux kernel 2.6.22.19), ipset with
dnsmasq working fine, from netstat -lnp , i can see dnsmasq have a RAW
Proto standing:<br>
<br><i>udp 0 0 <a href="http://0.0.0.0:43000" target="_blank">0.0.0.0:43000</a> 0.0.0.0:* 5590/eapd <br>raw 0 0 <a href="http://0.0.0.0:255" target="_blank">0.0.0.0:255</a> 0.0.0.0:* 7 12439/dnsmasq <br>
raw 0 0 <a href="http://0.0.0.0:255" target="_blank">0.0.0.0:255</a> 0.0.0.0:* 7 16777/pppd <br>raw 0 0 <a href="http://0.0.0.0:255" target="_blank">0.0.0.0:255</a> 0.0.0.0:* 7 4011/socat <br>
raw 0 0 <a href="http://0.0.0.0:255" target="_blank">0.0.0.0:255</a> 0.0.0.0:* 7 1231/ss-local </i><br><br></div><div class="gmail_extra">but on this RT-N56U system, none of RAW exist:<br>
<br><i>udp 0 0 <a href="http://192.168.1.1:138" target="_blank">192.168.1.1:138</a> 0.0.0.0:* 673/nmbd <br>udp 0 0 <a href="http://0.0.0.0:138" target="_blank">0.0.0.0:138</a> 0.0.0.0:* 673/nmbd <br>
udp 0 0 <a href="http://192.168.1.1:48066" target="_blank">192.168.1.1:48066</a> 0.0.0.0:* 544/miniupnpd <br>Active UNIX domain sockets (only servers)<br>Proto RefCnt Flags Type State I-Node PID/Program name Path<br>
unix 2 [ ACC ] STREAM LISTENING 973 786/pdnsd /var/cache/pdnsd/pdnsd.status</i><br><br></div><div class="gmail_extra">I pay attention to the RAW because i found the error string from ipset.c next section:<br>
<br><i> if (old_kernel && (ipset_sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW)) != -1)<br> return;<br> <br> if (!old_kernel && <br> (buffer = safe_malloc(BUFF_SZ)) &&<br> (ipset_sock = socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER)) != -1 &&<br>
(bind(ipset_sock, (struct sockaddr *)&snl, sizeof(snl)) != -1))<br> return;<br> <br> die (_("failed to create IPset control socket: %s"), NULL, EC_MISC);</i><br><br></div>
It is about RAW check or something? I am a total novice of C language...<br><br></div>It's first time i use mail list, it's right to reply all?<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-02-16 2:58 GMT+08:00 Hartmut Krafft <span dir="ltr"><<a href="mailto:hartmut@mail.ru" target="_blank">hartmut@mail.ru</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">Hi!<br>
Do you have ipset installed correctly? You need a kernel module and an admin program called ipset. You first need to create your ipsets using this program (man ipset). Only then you can use them in dnsmasq. You can check if the IP set was created correctly by issuing ipset -l gfwlist (or another name).<br>
But I think you are missing the basic ipset support in your system. You should have got an error creating the empty IP sets, though...<br>
<br>
On Feb 15, 2014 6:50 PM, "Punk[D.M]" <<a href="mailto:punkdm@gmail.com">punkdm@gmail.com</a>> wrote:<br>
><br>
> After i compile a ASUS RT-N56U/N65U/N14U custom firmware 3.X.3.7-079 by Padavan(<a href="https://code.google.com/p/rt-n56u/" target="_blank">https://code.google.com/p/rt-n56u/</a>) with HAVE_IPSET on kernel-3.0.x (or kernel-3.4.x),<br>
><br>
><br>
> reboot the router and i got this error in log:<br>
><br>
> dnsmasq[515]:failed to create IPset control socket: Protocol not supported<br>
><br>
> and dnsmasq failed to start.<br>
><br>
> I had some ipset setting in dnsmasq config:<br>
><br>
><br>
><br>
> ipset=/<a href="http://youtube.com/gfwlist" target="_blank">youtube.com/gfwlist</a><br>
><br>
> ipset=/<a href="http://twitter.com/gfwlist" target="_blank">twitter.com/gfwlist</a><br>
><br>
> ...etc<br>
><br>
> Any suggest with this? Thanks!<br>
><br>
><br>
><br>
> Sorry my english!<br>
><br>
><br>
> <br>
><br>
><br>
</div></div>_______________________________________________<br>
Dnsmasq-discuss mailing list<br>
<a href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk">Dnsmasq-discuss@lists.thekelleys.org.uk</a><br>
<a href="http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss" target="_blank">http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss</a><br>
</blockquote></div><br></div>