Hallo,

ich habe versucht auf einer "Digitalisierungsbox SMART 2" ein Portforwarding einzurichten, was leider nicht funktioniert hat. Im Syslog der Box finde ich diverse Fehler der iptables Kommandos die auf der Box ausgeführt werden, aber offensichtlich auf Fehler laufen.

Dec 4 13:05:26 digi user.debug syslog: new config state: modified
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallZones: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallTimePlans: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallOwners: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallICMPv6Allow: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallTrustedHosts: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallPortTrigger: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallInterfaces: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallZoneRelations: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallRules: exiting (false)
Dec 4 13:05:26 digi user.warn firewalld[5909]: warning:FWZoneHldr doReadTableFirewallPortmaps: constraints violation, FwPortmaps.ZoneID (0) -> FwZones.Id (non existent)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallPortmaps: exiting (true)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallExposedHost: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallSystemCommands: exiting (false)
Dec 4 13:05:26 digi user.notice firewalld[5909]: info:FWZoneHldr doReadTableFirewallRedirects: exiting (false)
Dec 4 13:05:26 digi user.err iptables: [1]: iptables: No chain/target/match by that name. :: /sbin/iptables -w -t nat -D PortForwards -p UDP --dport 500 -j DNAT --to <destination ip in local network> -d <external ip>
Dec 4 13:05:26 digi user.err iptables: [1]: iptables: Bad rule (does a matching rule exist in that chain?). :: /sbin/iptables -w -D InternetNTPTR069Forwarding -p UDP -d <destination ip in local network> --dport 500 -j ACCEPT
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: Bad rule (does a matching rule exist in that chain?). :: /sbin/iptables -w -D LocalLANForwarding -p UDP -d <destination ip in local network> --dport 500 -j ACCEPT -o eth0
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: No chain/target/match by that name. :: /sbin/iptables -w -t nat -D PortForwards -p UDP --dport 1701 -j DNAT --to <destination ip in local network> -d <external ip>
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: Bad rule (does a matching rule exist in that chain?). :: /sbin/iptables -w -D InternetNTPTR069Forwarding -p UDP -d <destination ip in local network> --dport 1701 -j ACCEPT
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: Bad rule (does a matching rule exist in that chain?). :: /sbin/iptables -w -D LocalLANForwarding -p UDP -d <destination ip in local network> --dport 1701 -j ACCEPT -o eth0
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: No chain/target/match by that name. :: /sbin/iptables -w -t nat -D PortForwards -p UDP --dport 4500 -j DNAT --to <destination ip in local network> -d <external ip>
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: Bad rule (does a matching rule exist in that chain?). :: /sbin/iptables -w -D InternetNTPTR069Forwarding -p UDP -d <destination ip in local network> --dport 4500 -j ACCEPT
Dec 4 13:05:27 digi user.err iptables: [1]: iptables: Bad rule (does a matching rule exist in that chain?). :: /sbin/iptables -w -D LocalLANForwarding -p UDP -d <destination ip in local network> --dport 4500 -j ACCEPT -o eth0
Dec 4 13:05:27 digi user.err ip6tables: [1]: ip6tables: Too many links. :: /sbin/ip6tables -w -X ICMPv6Filter
Dec 4 13:05:28 digi user.err iptables: [1]: iptables: No chain/target/match by that name. :: /sbin/iptables -w -t filter -F LocalInput
Dec 4 13:05:28 digi user.err ip6tables: [1]: ip6tables: No chain/target/match by that name. :: /sbin/ip6tables -w -t filter -F LocalInput
Dec 4 13:05:28 digi user.err iptables: [1]: iptables: No chain/target/match by that name. :: /sbin/iptables -w -t filter -X LocalInput
Dec 4 13:05:28 digi user.err ip6tables: [1]: ip6tables: No chain/target/match by that name. :: /sbin/ip6tables -w -t filter -X LocalInput
Dec 4 13:05:29 digi user.err iptables: [1]: iptables: Bad built-in chain name. :: /sbin/iptables -w -P IPInput DROP
Dec 4 13:05:29 digi user.err iptables: [1]: iptables: Bad built-in chain name. :: /sbin/iptables -w -P IPForward DROP
Dec 4 13:05:29 digi user.err ip6tables: [1]: ip6tables: Bad built-in chain name. :: /sbin/ip6tables -w -P IPInput DROP
Dec 4 13:05:29 digi user.err ip6tables: [1]: ip6tables: Bad built-in chain name. :: /sbin/ip6tables -w -P IPForward DROP
Dec 4 13:05:29 digi user.err ip6tables: [1]: ip6tables: Chain already exists. :: /sbin/ip6tables -w -N ICMPv6Filter
Dec 4 13:05:30 digi user.err iptables: [2]: iptables v1.8.3 (legacy): invalid mask `' specified Try `iptables -h' or 'iptables --help' for more information. :: /sbin/iptables -w -t nat -A Nat -o brwlan0 -s / -j MASQUERADE
Dec 4 13:05:30 digi user.err iptables: [2]: iptables v1.8.3 (legacy): Couldn't load target `LocalHostForwarding':No such file or directory Try `iptables -h' or 'iptables --help' for more in
formation. :: /sbin/iptables -w -I IPForward 1 -i lo -j LocalHostForwardin
Dec 4 13:05:30 digi user.err ip6tables: [2]: ip6tables v1.8.3 (legacy): Couldn't load target `LocalHostForwarding':No such file or directory Try `ip6tables -h' or 'ip6tables --help' for more information. :: /sbin/ip6tables -w -I IPForward 1 -i lo -j LocalHostForw
Dec 4 13:05:31 digi user.notice cfgserver[1572]: info:cfgserver Persisted data: mode: 1 count: 14
Dec 4 13:05:31 digi user.notice srv-save-config-active: Saving active configuration

Im Syslog Auszug habe ich die IP Adressen ersetzt.

Die Firmware der Box ist auf aktuellem Stand (zumindest wenn man online Check in der Box Glauben schenken darf):
16.40.2.18.00 (Tue, 03 Sep 2024 10:16:43 +0200)

Ich habe die Port Forwarding Config mehrfach aktiviert und deaktiviert um mögliche Prozesse zum Anlegen von Verzeichnissen oder der iptables Chains zu erzwingen, aber das war genauso wenig erfolgreich wie ein Reboot der Box.

Wie kann man das Problem lösen und das Port Forwarding erfolgreich aktivieren?