Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Patching sshuttle's firewall.py -- IPFW to PF [closed]

Tags:

python

Has anyone fixed 'firewall.py' for sshuttle to use PF instead of IPFW for the Yosemite 10.10 update?

https://github.com/apenwarr/sshuttle
https://github.com/apenwarr/sshuttle/blob/master/firewall.py

I have looked around for a fix, but nothing seems to be available yet. I am more of rails guy, and don't know python too well. Besides being able to make a little sense of it, I don't know where to begin with making this change and hoping the community could help, or hoping someone has a fork already fixed.

like image 562
nil Avatar asked Oct 19 '14 03:10

nil


2 Answers

Update: The pull request mentioned below, still fails after some time.

Original answer

Philip Thrasher har finalized Fredrik Gustafsson's work and created a pull request for sshuttle.

I tried it out and was able to get it to work (at the least for outgoing connections). I used this script:

#/bin/bash
sudo echo "Installing PyXAPI"
curl -O http://www.pps.univ-paris-diderot.fr/~ylg/PyXAPI/PyXAPI-0.1.tar.gz
tar -xzvf PyXAPI-0.1.tar.gz
cd PyXAPI-0.1
./configure
make
sudo make install
cd ..

echo "Installing autossh"
brew update
brew install autossh

echo "Getting sshuttle"
git clone https://github.com/pthrasher/sshuttle.git
cd sshuttle/src/
echo "Please add '`pwd`' to your path or run 'alias sshuttle=`pwd`/sshuttle'"

after this I can run it like usual

sshuttle -r user@server 0.0.0.0/0 -vv
like image 159
Tobber Avatar answered Oct 01 '22 02:10

Tobber


Taken from Tom Luff's comment in the Google Group:

There are a few forks of the repository that have begun work on supporting the new packet filter interface (pfctl). I've not actually tried any of them yet but it could be worth looking over them.

This seems to be the most recent: https://github.com/zabracks/sshuttle/

This also looks promising: https://github.com/jagheterfredrik/sshuttle

like image 39
petehare Avatar answered Oct 01 '22 03:10

petehare