Comments (17)
According to this thread, a firewall could cause the sendto
function to fail with Operation not permitted
.
Btw, because it was mentioned on the OpenWRT forum thread you referenced: The "Received upload request without filename." message is not an issue.
from nmrpflash.
Thanks for your response.
Please note that ufw
was disabled, and yet the above behaviour was still observed. Many times.
Good to know about the "Received upload..." message.
Going for a full reinstallation of this OS, (upgrade), will try again after. Will make brief report here either way.
from nmrpflash.
Tried it again. All from a fresh installation of the OS, new copies of all files. Still getting the same behavior, despite ufw
(Uncomplicated FireWall) being set to disable
.
Error message is still Operation not permitted
. Still unsure what is not permitting what.
from nmrpflash.
from nmrpflash.
Tried it again. All from a fresh installation of the OS, new copies of all files. Still getting the same behavior, despite ufw
(Uncomplicated FireWall) being set to disable
.
Error message is still Operation not permitted
. Still unsure what is not permitting what.
from nmrpflash.
Originally I was using Lubuntu 22.04.4, but I just bust back down the the 'stable' release of 22.04. Makes no difference, apparently.
Also attempted with Fedora 40 live usb, but neither nmrpflash
nor the dependencies are found by dnf
, so I left it.
Might make one more try with a live Ubuntu usb, but not sure. Leaning towards abandoning the 6220 and using an old Rasp. Pi instead.
Again, to make clear, ufw
has been disabled all along.
For your request:
$ sudo ufw disable
[sudo] password for x:
Firewall stopped and disabled on system startup
and
$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ufw-before-logging-input all -- anywhere anywhere
ufw-before-input all -- anywhere anywhere
ufw-after-input all -- anywhere anywhere
ufw-after-logging-input all -- anywhere anywhere
ufw-reject-input all -- anywhere anywhere
ufw-track-input all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ufw-before-logging-forward all -- anywhere anywhere
ufw-before-forward all -- anywhere anywhere
ufw-after-forward all -- anywhere anywhere
ufw-after-logging-forward all -- anywhere anywhere
ufw-reject-forward all -- anywhere anywhere
ufw-track-forward all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ufw-before-logging-output all -- anywhere anywhere
ufw-before-output all -- anywhere anywhere
ufw-after-output all -- anywhere anywhere
ufw-after-logging-output all -- anywhere anywhere
ufw-reject-output all -- anywhere anywhere
ufw-track-output all -- anywhere anywhere
Chain ufw-after-forward (1 references)
target prot opt source destination
Chain ufw-after-input (1 references)
target prot opt source destination
Chain ufw-after-logging-forward (1 references)
target prot opt source destination
Chain ufw-after-logging-input (1 references)
target prot opt source destination
Chain ufw-after-logging-output (1 references)
target prot opt source destination
Chain ufw-after-output (1 references)
target prot opt source destination
Chain ufw-before-forward (1 references)
target prot opt source destination
Chain ufw-before-input (1 references)
target prot opt source destination
Chain ufw-before-logging-forward (1 references)
target prot opt source destination
Chain ufw-before-logging-input (1 references)
target prot opt source destination
Chain ufw-before-logging-output (1 references)
target prot opt source destination
Chain ufw-before-output (1 references)
target prot opt source destination
Chain ufw-reject-forward (1 references)
target prot opt source destination
Chain ufw-reject-input (1 references)
target prot opt source destination
Chain ufw-reject-output (1 references)
target prot opt source destination
Chain ufw-track-forward (1 references)
target prot opt source destination
Chain ufw-track-input (1 references)
target prot opt source destination
Chain ufw-track-output (1 references)
target prot opt source destination
All seems very permissive.
from nmrpflash.
And if it makes a difference, I am running it through a switch (the PC and the router are the only things connected).
from nmrpflash.
Have changed distros to the more mainstream Ubuntu.
Tried with and without the switch.
Yes, ufw
is off.
-> no change in behavior.
I guess its one of three things:
- hardware problem. Maybe???
- a debian-based or Ubuntu-based linux problem.
- something on the router is still active and looking for permissions
If I can get VirtualBox to run Windows and bridge to the router, I'll try there. I'll report success or failure here. But I have to be honest, my enthusiasm is waning.
from nmrpflash.
I should note though, I am grateful for your work @jclehner .
from nmrpflash.
If I can get VirtualBox to run Windows and bridge to the router, I'll try there. I'll report success or failure here. But I have to be honest, my enthusiasm is waning.
Fail. Couldn't get Windows running in qemu
/kvm
-virt-mang
or bootable USB.
Had enough.
from nmrpflash.
One final point @jclehner :
Someone has noticed a difference between Windows and Linux:
On windows, this is the purpose of the message
Received keep-alive request (253).
which I didn't had using Linux. This message increments itself while flashing.
from nmrpflash.
Had enough.
Bummer. Could you try running nmrpflash
with strace
one last time. And include the dmesg
output immediately after running the command.
$ sudo strace -tt -o strace.log -- ./nmrpflash -i enp0s25 -f R6220-V1.1.0.114_1.0.1.img
$ sudo dmesg > dmesg.log
and attach the resulting strace.log
and dmesg.log
files.
Someone has noticed a difference between Windows and Linux:
Weird. I'll investigate...
from nmrpflash.
Going to take a little time.
Have a complete failure to boot on that machine - just after I installed fuse
to get your program up and running. I thought it might be that (still might), but apparently its not uncommon.
-> Full reinstall.
from nmrpflash.
ok, second attempt.
New system in place (Ubuntu jammy), your latest version and tried again. Same results.
libpcap0.8/jammy,now 1.10.1-4build1 amd64 [installed,automatic]
libnl-3-200/jammy,now 3.5.0-0.1 amd64 [installed,automatic]
$ sudo ufw disable
[sudo] password for x:
Firewall stopped and disabled on system startup
...
$ sudo strace -tt -o strace.log -- ./nmrpflash -i enp0s25 -f R6220-V1.1.0.114_1.0.1.img
[sudo] password for x:
Waiting for Ethernet connection (Ctrl-C to skip).
Advertising NMRP server on enp0s25 ... /
Received configuration request from b0:39:56:1a:bc:00.
Sending configuration: 10.164.183.253/24.
Received upload request without filename.
Uploading R6220-V1.1.0.114_1.0.1.img ... sendto: Operation not permitted
strace.log.zip
dmesg-extract.log
Hope it helps!
from nmrpflash.
Hmm... I'm kinda stumped by this one.
- It's not a firewall issue
- It's neither a hardware nor driver issue (same results with internal and external Ethernet, as reported by you on the OpenWRT forums)
- It's not an Ubuntu 22.04 issue (flashing one of my devices from that Ubuntu release worked without issue)
sendto
is the function that sends the TFTP packets, but it isn't even supposed to fail with that specific error code (EPERM
corresponds to "Operation not permitted"). The fact that the function fails must be related to something locally, not the router. It fails to send even the first TFTP packet.
from nmrpflash.
This is interesting, (in a depressing kind of way).
Could this be hardware related? Its a battered old second-hand Levono x230i, ex-corporate. Its been great for what it is, but I've never tried to use it for any work on a second device, like the router.
I've just had a fail on a serial connection to a malfunctioning Pi, but in reality I think that's a problem with the connector, not the computer. Still makes me wonder.
Could a corporate security policy shut down serial or other (e.g. TFPT) connections at a hardware level as a safety measure?
from nmrpflash.
Hope it's not too late. You could try another TFTP client, since the issue might be nmrpflash
's TFTP implementation:
$ sudo apt-get install -y tftp-hpa
$ sudo nmrpflash -i enp0s25 -c 'tftp -v -m binary $IP $PORT -c put R6220-V1.1.0.114_1.0.1.img'
Note that the current version of nmrpflash
will exit immedtiately after running the tftp
command, so wait for at least 5-10 minutes before rebooting the router.
Could this be hardware related?
Could a corporate security policy shut down serial or other (e.g. TFPT) connections at a hardware level as a safety measure?
No. Something in the linux kernel tells the sendto
function to fail with that error code, before the packet is even sent. Could be AppArmor related.
from nmrpflash.
Related Issues (20)
- R8000 - Timeout while waiting for ACK(1) HOT 19
- Unbrick orbi HOT 1
- "Ethernet cable is unplugged" HOT 3
- R6800 transfert OK but solid amber and routeur doesn't ping HOT 6
- can't connect on Kali to a Netgear AC1000 R6080 HOT 14
- Orbi RBK753, i just want to change region code, HOT 5
- R8000 - Stuck on Ack(0) HOT 3
- Invalid Interface HOT 2
- Stuck in “Received keep-alive request” state HOT 4
- R6900v2 flash complete but power light stays amber HOT 3
- Success Flashing AX40 model :)
- Successfully tested with RBK40 HOT 1
- Flashing DG3000D HOT 2
- Received configuration request from 00:00:00:00:00:00 HOT 11
- Cannot rollback to recent versions of factory firmware after rolling back from DD-WRT on Netgear R7000 HOT 3
- Cannot flash firmware to R7000P HOT 2
- nmrpflash -L to give Netgear Device name
- R9000 Nighthawk - No response after 60 seconds. Bailing out.
- RBS50, No response, or forcibly closed in blind mode
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nmrpflash.