Accessing internet through comitup

[wspi]

I usually use comitup on my raspberry pi 3 connected via ethernet cable, doing so I was wondering, is there a way to comitup detect that the wired connection is on, and turn the wifi on so users could connect to this wifi and have access to the internet?

I've connected to the hotspot ssid but it won't have access to the internet

not sure if #168 would allow this

[davesteele]

#168 is different. It suggests that Comitup should drop the hotspot if there is a wired connection.

You need two things to be able to do this - ip_forwarding needs to be enabled, and masquerading needs to be set for the wired port. Comitup does both of these things. See the rules with nft when all interfaces are up.

I replaced iptables with nft last year. I may have messed the masquerading up. Let me know if you see a problem with the rules.

[wspi]

I'm not familiar with nft, but I'll take a look and let you know

[wspi]

one thing that I've noticed is that ip_forwarding is not enabled,

# cat /proc/sys/net/ipv4/ip_forward
0

and if I'm looking at the right place, there are no nft rules

# nft list ruleset
table ip filter {
	chain COMITUP-OUT {
		type filter hook output priority 100; policy accept;
		icmp type destination-unreachable counter packets 277 bytes 153104 drop
		icmp code port-unreachable counter packets 0 bytes 0 drop
		counter packets 10799 bytes 707213 return
	}
}

also looking at the comitup-cli info

Host comitup-147.local on comitup version 1.43
'single' mode
HOTSPOT state

so I guess the single mode it's not what it should be?

[davesteele]

Marking as a bug.