Hi,

 

at first thank your for your great work!

 

I've successfully created an wifi hotspot on nanopiM4 using "Armbian_5.95_Nanopim4_Debian_buster_default_4.4.190"  with armbian-config utitlity. After the tool is finished I can connect to the hotspot and it shares the internet connection..

 

However - when I reboot the system the hotspot still works and I can connect but I have no connection to the internet anymore. The nonopi itself has connection to internet, I checked that.

 

Do you have any sugestions? Thank you in andvance!

 

Christian

 

7 hours ago, hoffi77 said:

Do you have any sugestions?

 

Try running:

iptables-restore /etc/iptables.ipv4.nat

 

Iptables with working internet connection

 

root@nanopim4:~# iptables -S -v
-P INPUT ACCEPT -c 569 45493
-P FORWARD ACCEPT -c 0 0
-P OUTPUT ACCEPT -c 427 43610
-A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -c 0 0 -j ACCEPT
-A FORWARD -i wlan0 -o eth0 -c 0 0 -j ACCEPT

Iptables after reboot

cho@nanopim4:~$ sudo iptables -S -v
-P INPUT ACCEPT -c 7 376
-P FORWARD ACCEPT -c 0 0
-P OUTPUT ACCEPT -c 6 1024

 

But if I try 

 

iptables-restore /etc/iptables.ipv4.nat

 

It gives me:

 

root@nanopim4:~# iptables-restore /etc/iptables.ipv4.nat
iptables-restore v1.8.2 (nf_tables):
line 3: CHAIN_UPDATE failed (No such file or directory): chain PREROUTING
line 4: CHAIN_UPDATE failed (No such file or directory): chain INPUT
line 5: CHAIN_UPDATE failed (No such file or directory): chain POSTROUTING
line 6: CHAIN_UPDATE failed (No such file or directory): chain OUTPUT

And does not change the iptables :-/

 

The filecontents:

root@nanopim4:~# cat /etc/iptables.ipv4.nat
# Generated by xtables-save v1.8.2 on Thu Sep 26 16:51:01 2019
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Thu Sep 26 16:51:01 2019
# Generated by xtables-save v1.8.2 on Thu Sep 26 16:51:01 2019
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i wlan0 -o eth0 -j ACCEPT
COMMIT
# Completed on Thu Sep 26 16:51:01 2019

 

< fell out somewhere

iptables-restore < /etc/iptables.ipv4.nat

 

Same :-/

cho@nanopim4:~$ sudo iptables-restore < /etc/iptables.ipv4.nat
iptables-restore v1.8.2 (nf_tables):
line 3: CHAIN_UPDATE failed (No such file or directory): chain PREROUTING
line 4: CHAIN_UPDATE failed (No such file or directory): chain INPUT
line 5: CHAIN_UPDATE failed (No such file or directory): chain POSTROUTING
line 6: CHAIN_UPDATE failed (No such file or directory): chain OUTPUT

 

Got it!

 

The kernel is using nftables already by default, had to go for legacy support:

 

cho@nanopim4:~$ sudo update-alternatives --set iptables /usr/sbin/iptables-legacy
update-alternatives: using /usr/sbin/iptables-legacy to provide /usr/sbin/iptables (iptables) in manual mode
cho@nanopim4:~$ sudo iptables-restore < /etc/iptables.ipv4.nat
cho@nanopim4:~$ sudo iptables -S -v
-P INPUT ACCEPT -c 76 4801
-P FORWARD ACCEPT -c 0 0
-P OUTPUT ACCEPT -c 76 14496
-A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -c 0 0 -j ACCEPT
-A FORWARD -i wlan0 -o eth0 -c 0 0 -j ACCEPT

It works now  Thx!