Error running ./script/setup in Build and install OTBR about ot-br-posix HOT 17 CLOSED

It did it!
It ran through!
Thank you very much!

from ot-br-posix.

Have you ran ./script/bootstrap?

from ot-br-posix.

Yes, I did.

It mentioned something like this:

In file included from NetMonitor.c:26:
../mDNSCore/mDNS.c: In function ‘mDNS_StopQueryWithRemoves’:
../mDNSCore/mDNS.c:14272:74: warning: implicit conversion from ‘enum ’ to ‘QC_result’ [-Wenum-conversion]
14272 | question->QuestionCallback(m, question, &cr->resrec, mDNSfalse);
| ^~~~~~~~~
../mDNSCore/mDNS.c: In function ‘mDNS_DeactivateNetWake_internal’:
../mDNSCore/mDNS.c:15216:68: warning: implicit conversion from ‘enum ’ to ‘QC_result’ [-Wenum-conversion]
15216 | m->SPSBrowseCallback(m, &set->NetWakeBrowse, mDNSNULL, mDNSfalse);
| ^~~~~~~~~
cc objects/prod/mDNSPosix.c.o objects/prod/mDNSUNP.c.o objects/prod/mDNSDebug.c.o objects/prod/GenLinkedList.c.o objects/prod/DNSDigest.c.o objects/prod/uDNS.c.o objects/prod/DNSCommon.c.o objects/prod/PlatformCommon.c.o objects/prod/dso.c.o objects/prod/dso-transport.c.o objects/prod/dnssd_clientshim.c.o objects/prod/mdns_addr_tailq.c.o objects/prod/misc_utilities.c.o objects/prod/NetMonitor.c.o -o build/prod/mDNSNetMonitor
NetMonitor done
cc -I../mDNSCore -I../mDNSShared -I../mDNSShared/utilities -I../DSO -I../ServiceRegistration -Iobjects/prod -fwrapv -W -Wall -DPOSIX_BUILD -DPID_FILE="/var/run/mdnsd.pid" -DMDNS_UDS_SERVERPATH="/var/run/mdnsd" -D_GNU_SOURCE -DHAVE_IPV6 -DNOT_HAVE_SA_LEN -DUSES_NETLINK -DHAVE_LINUX -DTARGET_OS_LINUX -ftabstop=4 -Wno-expansion-to-defined -g -DMDNS_DEBUGMSGS=0 -c -fPIC -o objects/prod/nss_mdns.c.so.o nss_mdns.c
cc -shared -o build/prod/libnss_mdns-0.2.so objects/prod/dnssd_clientlib.c.so.o objects/prod/dnssd_clientstub.c.so.o objects/prod/dnssd_ipc.c.so.o objects/prod/dnssd_errstring.c.so.o objects/prod/nss_mdns.c.so.o
strip -S build/prod/libnss_mdns-0.2.so
Name Service Switch module done

• sudo make install os=linux tls=no
  cp mdnsd.sh /etc/init.d/mdns
  chmod ugo+x /etc/init.d/mdns
  ln -s -f /etc/init.d/mdns /etc/rc2.d/S52mdns
  ln -s -f /etc/init.d/mdns /etc/rc3.d/S52mdns
  ln -s -f /etc/init.d/mdns /etc/rc4.d/S52mdns
  ln -s -f /etc/init.d/mdns /etc/rc5.d/S52mdns
  ln -s -f /etc/init.d/mdns /etc/rc0.d/K16mdns
  ln -s -f /etc/init.d/mdns /etc/rc6.d/K16mdns
  /etc/init.d/mdns installed
  if test -x /usr/sbin/mdnsd; then /etc/init.d/mdns stop; fi
  Stopping mdns (via systemctl): mdns.serviceWarning: The unit file, source configuration file or drop-ins of mdns.service changed on disk. Run 'systemctl daemon-reload' to reload units.
  .
  cp build/prod/mdnsd /usr/sbin/mdnsd
  /etc/init.d/mdns start
  Starting mdns (via systemctl): mdns.serviceWarning: The unit file, source configuration file or drop-ins of mdns.service changed on disk. Run 'systemctl daemon-reload' to reload units.

The bootstrap script ended with:

.
/usr/sbin/mdnsd installed
cp build/prod/libdns_sd.so /usr/lib/libdns_sd.so.1
ln -s -f /usr/lib/libdns_sd.so.1 /usr/lib/libdns_sd.so
/usr/lib/libdns_sd.so.1 /usr/include/dns_sd.h installed
/usr/share/man/man8/mdnsd.8 installed
cp ../Clients/build/dns-sd /usr/bin/dns-sd
/usr/bin/dns-sd installed
cp build/prod/libnss_mdns-0.2.so /lib/libnss_mdns-0.2.so
chmod 444 /lib/libnss_mdns-0.2.so
ln -s -f /lib/libnss_mdns-0.2.so /lib/libnss_mdns.so.2
ldconfig
/lib/libnss_mdns.so.2 /etc/nss_mdns.conf /usr/share/man/man5/nss_mdns.conf.5 /usr/share/man/man8/libnss_mdns.8 installed

• sudo apt-get install --no-install-recommends -y libboost-dev libboost-filesystem-dev libboost-system-dev
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  libboost-dev is already the newest version (1.74.0.3).
  libboost-filesystem-dev is already the newest version (1.74.0.3).
  libboost-system-dev is already the newest version (1.74.0.3).
  0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
• without NAT64
• with NAT64
• local value
  ++ printenv NAT64
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${NAT64-}'
  +++ echo 0
• value=0
• [[ 0 == 1 ]]
• without DNS64
• with DNS64
• local value
  ++ printenv DNS64
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${DNS64-}'
  +++ echo 0
• value=0
• [[ 0 == 1 ]]
• without NETWORK_MANAGER
• with NETWORK_MANAGER
• local value
  ++ printenv NETWORK_MANAGER
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${NETWORK_MANAGER-}'
  +++ echo 0
• value=0
• [[ 0 == 1 ]]
• without DHCPV6_PD
• with DHCPV6_PD
• local value
  ++ printenv DHCPV6_PD
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${DHCPV6_PD-}'
  +++ echo 0
• value=0
• [[ 0 == 1 ]]
• sudo apt-get install --no-install-recommends -y libjsoncpp-dev
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  libjsoncpp-dev is already the newest version (1.9.5-4).
  0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
• without REFERENCE_DEVICE
• with REFERENCE_DEVICE
• local value
  ++ printenv REFERENCE_DEVICE
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${REFERENCE_DEVICE-}'
  +++ echo
• value=
• [[ '' == 1 ]]
• without BACKBONE_ROUTER
• with BACKBONE_ROUTER
• local value
  ++ printenv BACKBONE_ROUTER
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${BACKBONE_ROUTER-}'
  +++ echo 1
• value=1
• [[ 1 == 1 ]]
• sudo apt-get install --no-install-recommends -y libnetfilter-queue1 libnetfilter-queue-dev
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  libnetfilter-queue1 is already the newest version (1.0.5-3).
  libnetfilter-queue-dev is already the newest version (1.0.5-3).
  0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
• without WEB_GUI
• with WEB_GUI
• local value
  ++ printenv WEB_GUI
• value=
• [[ -z '' ]]
• [[ -f examples/platforms/debian/default ]]
  ++ . examples/platforms/debian/default
  +++ NAT64=0
  +++ DNS64=0
  +++ DHCPV6_PD=0
  +++ NETWORK_MANAGER=0
  +++ BACKBONE_ROUTER=1
  +++ BORDER_ROUTING=1
  +++ REST_API=1
  ++ eval echo '${WEB_GUI-}'
  +++ echo
• value=
• [[ '' == 1 ]]
• sudo apt-get install -y iptables ipset
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  iptables is already the newest version (1.8.9-2).
  ipset is already the newest version (7.17-1).
  0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
• sudo apt-get install -y libprotobuf-dev protobuf-compiler
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  libprotobuf-dev is already the newest version (3.21.12-3).
  protobuf-compiler is already the newest version (3.21.12-3).
  0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
• . /dev/null

I "sudo systemctl daemon-reload" and tried it again.
The error in the setup script is still the same.

SEGGER/JLink, nRF5x Command Line Tools and ARM GNU Toolchain are installed.

from ot-br-posix.

Thanks! Could you help provide below information:

1. The git commit id of your ot-br-posix checkout
2. file /usr/include/dns_sd.h on your RPi
3. Can you confirm that it is "mDNSResponder-1790.80.10" being installed in your script/bootstrap? You can check by looking at the source code of file script/bootstrap (search "mDNSResponder-1790.80.10")

from ot-br-posix.

Hi,
1.
commit ae8b4a8 (grafted, HEAD -> main, origin/main, origin/HEAD)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu May 2 08:27:54 2024 -0700

dns_sdh.txt

I would say "yes", but look for yourself.
Log_bootstrap.txt

Thanks.

from ot-br-posix.

Dear all,
Any updates on this one?
Is anything missing?
Thx.

from ot-br-posix.

Your dns_sd.h may be too old according to its content.

The copyright section of your dns_sd.h:

 * Copyright (c) 2003-2004, Apple Computer, Inc. All rights reserved.\

Mine (which is version 1661):

Copyright (c) 2003-2023 Apple Inc. All rights reserved.

I'm not sure why it wasn't updated at the bootstrap step though.

from ot-br-posix.

Your Log_bootstrap.txt doesn't include the full bootstrap log.

My suspect is that it's not successfully installing the mDNSResponder in the bootstrap script, but you are using the existing old version on your raspberry pi. Could you just install the latest version of mDNSRsponder by yourself?

E.g.

1. Download and unzip https://github.com/apple-oss-distributions/mDNSResponder/releases/tag/mDNSResponder-2200.100.94.0.2
2. go to mDNSPosix folder and run make install

from ot-br-posix.

Dear all,
First of all thank you very much.
Here the complete bootstrap file: script_bootstrap.txt

It seems I have installed mDNSResponder-1790.80.10.
I did as you said - see my steps: mDNSResponder.txt

At the end I get this error:

../mDNSShared/PlatformCommon.c: In function ‘getMillisecondsFromTicks’:
../mDNSShared/PlatformCommon.c:803:37: error: ‘UINT_MAX’ undeclared (first use in this function)
803 | const mDNSu32 maxMilliseconds = UINT_MAX;
| ^~~~~~~~
../mDNSShared/PlatformCommon.c:41:1: note: ‘UINT_MAX’ is defined in header ‘<limits.h>’; did you forget to ‘#include <limits.h>’?
40 | #include "mdns_strict.h"
+++ |+#include <limits.h>
41 |
../mDNSShared/PlatformCommon.c:803:37: note: each undeclared identifier is reported only once for each function it appears in
803 | const mDNSu32 maxMilliseconds = UINT_MAX;
| ^~~~~~~~
../mDNSShared/PlatformCommon.c:810:47: error: ‘INT_MAX’ undeclared (first use in this function)
810 | const mDNSu32 maxWholeSecsFromMaxTicks = (INT_MAX / (mDNSu32)mDNSPlatformOneSecond);
| ^~~~~~~
../mDNSShared/PlatformCommon.c:810:47: note: ‘INT_MAX’ is defined in header ‘<limits.h>’; did you forget to ‘#include <limits.h>’?
make: *** [Makefile:514: objects/prod/PlatformCommon.c.o] Error 1

Can you help me once again?
Thank you very much.

from ot-br-posix.

For manual installation of mDNSResponder, I think you can just add #include <limits.h> in mDNSShared/PlatformCommon.c and it will be buildable

from ot-br-posix.

Dear superwhd,

did that already and got this in the process.
PlatformCommonc.txt
mbedtls_error.txt

I am so sorry to bother you again and again.
But I am a noob in this.

Thx

from ot-br-posix.

Dear all,

I think I am at the last step...
Log bootstrap: bootstrap_new.txt
Log setup: setup_new.txt

Last step fails (27/27). I am running my Raspberry Pi 4B with Homebridge on Avahi.
Do I have to change it or is there a way around?

Thanks.

from ot-br-posix.

I think you need to check which version of mDNSResponder is installed and referenced by otbr-agent when building. Maybe you can take a look at dns_sd.h to see if it's the desired version.

Also, I saw two versions 2200.100.94.0.2 and 1790.80.10 in your logs. If you'd like to install mDNSResponder manually instead of letting script/boostrap handle it, you should skip the step of installing it in script/bootstrap.

from ot-br-posix.

Dear all,

I handled the script/boostrap concerning mDNSResonder.
But I do not know what to do with dns_sd.h and otbr-agent.
Can you explain what I have to do exactly?

Thanks.

from ot-br-posix.

Your log:

/usr/bin/ld: src/mdns/libotbr-mdns.a(mdns_mdnssd.cpp.o): in function `otbr::Mdns::PublisherMDnsSd::HostSubscription::Resolve()':\
mdns_mdnssd.cpp:(.text+0x412c): undefined reference to `DNSServiceGetAddrInfo'\

It indicates that the version of your dns_sd.h header is incorrect, which means you may not failed to install the header file.

You may check if /usr/include/dns_sd.h is the same as mDNSShared/dns_sd.h. If not, you may consider manually removing it and rerun script/bootstrap to install mDNSResponder.

from ot-br-posix.

Dear all,

I deleted /usr/include/dns_sd.h, I installed 2200.100.94.0.2 manually and edited #mDNS in the bootstrap to not getting 1790.80.10, I edited #include <limits.h> to mDNSShared/PlatformCommon.c, I switched to eth0, then I ran every command again and still get the same result.

Last step - otbr_install fails with the same look.
[491/491] Linking CXX executable src/agent/otbr-agent
FAILED: src/agent/otbr-agent
: && /usr/bin/c++ -rdynamic src/agent/CMakeFiles/otbr-agent.dir/application.cpp.o src/agent/CMakeFiles/otbr-agent.dir/main.cpp.o -o src/agent/otbr-agent src/border_agent/libotbr-border-agent.a src/backbone_router/libotbr-backbone-router.a src/dbus/server/libotbr-dbus-server.a src/mdns/libotbr-mdns.a src/rest/libotbr-rest.a third_party/openthread/repo/src/posix/platform/libopenthread-posix.a third_party/openthread/repo/src/cli/libopenthread-cli-ftd.a third_party/openthread/repo/src/core/libopenthread-ftd.a third_party/openthread/repo/src/lib/spinel/libopenthread-spinel-rcp.a third_party/openthread/repo/src/lib/spinel/libopenthread-radio-spinel.a third_party/openthread/repo/src/lib/hdlc/libopenthread-hdlc.a src/sdp_proxy/libotbr-sdp-proxy.a src/ncp/libotbr-ncp.a src/common/libotbr-common.a src/utils/libotbr-utils.a -lsystemd src/trel_dnssd/libotbr-trel-dnssd.a src/dbus/common/libotbr-dbus-common.a -L/usr/lib/aarch64-linux-gnu -ldbus-1 src/proto/libotbr-proto.a /usr/lib/aarch64-linux-gnu/libprotobuf-lite.so third_party/http-parser/libhttp_parser.a third_party/cJSON/repo/libcjson.a -lm src/mdns/libotbr-mdns.a src/utils/libotbr-utils.a -ldns_sd src/common/libotbr-common.a third_party/openthread/repo/src/posix/platform/libopenthread-posix.a third_party/openthread/repo/src/cli/libopenthread-cli-ftd.a third_party/openthread/repo/src/lib/spinel/libopenthread-spinel-rcp.a third_party/openthread/repo/src/lib/spinel/libopenthread-radio-spinel.a third_party/openthread/repo/src/lib/hdlc/libopenthread-hdlc.a third_party/openthread/repo/src/lib/platform/libopenthread-platform.a third_party/openthread/repo/src/lib/url/libopenthread-url.a -lutil -lrt -lanl third_party/openthread/repo/src/core/libopenthread-ftd.a third_party/openthread/repo/third_party/tcplp/libtcplp-ftd.a third_party/openthread/repo/src/core/libopenthread-ftd.a third_party/openthread/repo/third_party/tcplp/libtcplp-ftd.a third_party/openthread/repo/third_party/mbedtls/repo/library/libmbedtls.a third_party/openthread/repo/third_party/mbedtls/repo/library/libmbedx509.a third_party/openthread/repo/third_party/mbedtls/repo/library/libmbedcrypto.a && :
/usr/bin/ld: src/mdns/libotbr-mdns.a(mdns_mdnssd.cpp.o): in function otbr::Mdns::PublisherMDnsSd::ServiceInstanceResolution::GetAddrInfo(unsigned int)': mdns_mdnssd.cpp:(.text+0x3c34): undefined reference to DNSServiceGetAddrInfo'
/usr/bin/ld: src/mdns/libotbr-mdns.a(mdns_mdnssd.cpp.o): in function otbr::Mdns::PublisherMDnsSd::HostSubscription::Resolve()': mdns_mdnssd.cpp:(.text+0x412c): undefined reference to DNSServiceGetAddrInfo'
collect2: error: ld returned 1 exit status
ninja: build stopped: subcommand failed.

Does this help: cat /var/log/syslog | grep otbr

2024-05-14T09:12:38.522082+02:00 RPi1 systemd[1]: Stopping otbr-firewall.service - LSB: OTBR firewall...
2024-05-14T09:12:47.357034+02:00 RPi1 otbr-firewall[558]: + case "$1" in
2024-05-14T09:12:47.357284+02:00 RPi1 otbr-firewall[558]: + firewall_start
2024-05-14T09:12:47.357430+02:00 RPi1 otbr-firewall[558]: + firewall_stop
2024-05-14T09:12:47.357566+02:00 RPi1 otbr-firewall[558]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS
2024-05-14T09:12:47.359710+02:00 RPi1 otbr-firewall[628]: ip6tables v1.8.9 (nf_tables): Chain 'OTBR_FORWARD_INGRESS' does not exist
2024-05-14T09:12:47.359926+02:00 RPi1 otbr-firewall[628]: Try ip6tables -h' or 'ip6tables --help' for more information. 2024-05-14T09:12:47.361295+02:00 RPi1 otbr-firewall[558]: + ip6tables -L OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.363175+02:00 RPi1 otbr-firewall[679]: ip6tables v1.8.9 (nf_tables): chain OTBR_FORWARD_INGRESS' in table filter' is incompatible, use 'nft' tool. 2024-05-14T09:12:47.364485+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-deny-src 2024-05-14T09:12:47.364671+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-deny-src 2024-05-14T09:12:47.382691+02:00 RPi1 systemd[1]: Starting otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:12:47.458446+02:00 RPi1 otbr-firewall[680]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.458803+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-deny-src-swap 2024-05-14T09:12:47.458984+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-deny-src-swap 2024-05-14T09:12:47.467492+02:00 RPi1 otbr-firewall[692]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.468113+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-allow-dst 2024-05-14T09:12:47.468470+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-allow-dst 2024-05-14T09:12:47.474967+02:00 RPi1 otbr-firewall[694]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.475484+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-allow-dst-swap 2024-05-14T09:12:47.475777+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-allow-dst-swap 2024-05-14T09:12:47.481437+02:00 RPi1 otbr-firewall[695]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.482141+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-deny-src hash:net family inet6 2024-05-14T09:12:47.518697+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-deny-src-swap hash:net family inet6 2024-05-14T09:12:47.525766+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-allow-dst hash:net family inet6 2024-05-14T09:12:47.533488+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-allow-dst-swap hash:net family inet6 2024-05-14T09:12:47.540535+02:00 RPi1 otbr-firewall[558]: + ip6tables -N OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.552023+02:00 RPi1 otbr-firewall[558]: + ip6tables -I FORWARD 1 -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.563025+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -i wpan0 -j DROP 2024-05-14T09:12:47.675183+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-deny-src src -j DROP 2024-05-14T09:12:47.722396+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-allow-dst dst -j ACCEPT 2024-05-14T09:12:47.733719+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -j DROP 2024-05-14T09:12:47.743749+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -j ACCEPT 2024-05-14T09:12:49.309536+02:00 RPi1 systemd[1]: Started otbr-firewall.service - LSB: OTBR firewall. 2024-05-14T09:37:19.544830+02:00 RPi1 systemd[1]: Stopping otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:37:19.575275+02:00 RPi1 otbr-firewall[4270]: + case "$1" in 2024-05-14T09:37:19.575557+02:00 RPi1 otbr-firewall[4270]: + firewall_stop 2024-05-14T09:37:19.575659+02:00 RPi1 otbr-firewall[4270]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.577742+02:00 RPi1 otbr-firewall[4270]: + ip6tables -D FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.611849+02:00 RPi1 otbr-firewall[4270]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.614481+02:00 RPi1 otbr-firewall[4278]: ip6tables: Bad rule (does a matching rule exist in that chain?). 2024-05-14T09:37:19.614686+02:00 RPi1 otbr-firewall[4270]: + ip6tables -L OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.618169+02:00 RPi1 otbr-firewall[4279]: Chain OTBR_FORWARD_INGRESS (0 references) 2024-05-14T09:37:19.618328+02:00 RPi1 otbr-firewall[4279]: target prot opt source destination 2024-05-14T09:37:19.618397+02:00 RPi1 otbr-firewall[4279]: DROP all -- anywhere anywhere PKTTYPE = unicast 2024-05-14T09:37:19.618445+02:00 RPi1 otbr-firewall[4279]: DROP all -- anywhere anywhere match-set otbr-ingress-deny-src src 2024-05-14T09:37:19.618497+02:00 RPi1 otbr-firewall[4279]: ACCEPT all -- anywhere anywhere match-set otbr-ingress-allow-dst dst 2024-05-14T09:37:19.618554+02:00 RPi1 otbr-firewall[4279]: DROP all -- anywhere anywhere PKTTYPE = unicast 2024-05-14T09:37:19.618594+02:00 RPi1 otbr-firewall[4279]: ACCEPT all -- anywhere anywhere 2024-05-14T09:37:19.618689+02:00 RPi1 otbr-firewall[4270]: + ip6tables -w -F OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.621137+02:00 RPi1 otbr-firewall[4270]: + ip6tables -w -X OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.675916+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-deny-src 2024-05-14T09:37:19.676057+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-deny-src 2024-05-14T09:37:19.678265+02:00 RPi1 otbr-firewall[4282]: Name: otbr-ingress-deny-src 2024-05-14T09:37:19.678420+02:00 RPi1 otbr-firewall[4282]: Type: hash:net 2024-05-14T09:37:19.678470+02:00 RPi1 otbr-firewall[4282]: Revision: 7 2024-05-14T09:37:19.678518+02:00 RPi1 otbr-firewall[4282]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0x92755564 2024-05-14T09:37:19.678570+02:00 RPi1 otbr-firewall[4282]: Size in memory: 1240 2024-05-14T09:37:19.678619+02:00 RPi1 otbr-firewall[4282]: References: 0 2024-05-14T09:37:19.678667+02:00 RPi1 otbr-firewall[4282]: Number of entries: 0 2024-05-14T09:37:19.678712+02:00 RPi1 otbr-firewall[4282]: Members: 2024-05-14T09:37:19.678809+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-deny-src 2024-05-14T09:37:19.680729+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-deny-src-swap 2024-05-14T09:37:19.680856+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-deny-src-swap 2024-05-14T09:37:19.683121+02:00 RPi1 otbr-firewall[4284]: Name: otbr-ingress-deny-src-swap 2024-05-14T09:37:19.683274+02:00 RPi1 otbr-firewall[4284]: Type: hash:net 2024-05-14T09:37:19.683362+02:00 RPi1 otbr-firewall[4284]: Revision: 7 2024-05-14T09:37:19.683410+02:00 RPi1 otbr-firewall[4284]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0xce40192a 2024-05-14T09:37:19.683494+02:00 RPi1 otbr-firewall[4284]: Size in memory: 1240 2024-05-14T09:37:19.683542+02:00 RPi1 otbr-firewall[4284]: References: 0 2024-05-14T09:37:19.683616+02:00 RPi1 otbr-firewall[4284]: Number of entries: 0 2024-05-14T09:37:19.683661+02:00 RPi1 otbr-firewall[4284]: Members: 2024-05-14T09:37:19.683769+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-deny-src-swap 2024-05-14T09:37:19.685603+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-allow-dst 2024-05-14T09:37:19.685730+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-allow-dst 2024-05-14T09:37:19.688019+02:00 RPi1 otbr-firewall[4286]: Name: otbr-ingress-allow-dst 2024-05-14T09:37:19.688188+02:00 RPi1 otbr-firewall[4286]: Type: hash:net 2024-05-14T09:37:19.688241+02:00 RPi1 otbr-firewall[4286]: Revision: 7 2024-05-14T09:37:19.688289+02:00 RPi1 otbr-firewall[4286]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0x3bf52d3d 2024-05-14T09:37:19.688351+02:00 RPi1 otbr-firewall[4286]: Size in memory: 1240 2024-05-14T09:37:19.688391+02:00 RPi1 otbr-firewall[4286]: References: 0 2024-05-14T09:37:19.688430+02:00 RPi1 otbr-firewall[4286]: Number of entries: 0 2024-05-14T09:37:19.688466+02:00 RPi1 otbr-firewall[4286]: Members: 2024-05-14T09:37:19.688547+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-allow-dst 2024-05-14T09:37:19.690366+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.690493+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.692784+02:00 RPi1 otbr-firewall[4288]: Name: otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.692955+02:00 RPi1 otbr-firewall[4288]: Type: hash:net 2024-05-14T09:37:19.693004+02:00 RPi1 otbr-firewall[4288]: Revision: 7 2024-05-14T09:37:19.693046+02:00 RPi1 otbr-firewall[4288]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0x345d24b5 2024-05-14T09:37:19.693118+02:00 RPi1 otbr-firewall[4288]: Size in memory: 1240 2024-05-14T09:37:19.693171+02:00 RPi1 otbr-firewall[4288]: References: 0 2024-05-14T09:37:19.693216+02:00 RPi1 otbr-firewall[4288]: Number of entries: 0 2024-05-14T09:37:19.693254+02:00 RPi1 otbr-firewall[4288]: Members: 2024-05-14T09:37:19.693332+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.695965+02:00 RPi1 systemd[1]: otbr-firewall.service: Deactivated successfully. 2024-05-14T09:37:19.696420+02:00 RPi1 systemd[1]: Stopped otbr-firewall.service - LSB: OTBR firewall. 2024-05-14T09:37:29.760806+02:00 RPi1 systemd[1]: Starting otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:37:29.791838+02:00 RPi1 otbr-firewall[4445]: + case "$1" in 2024-05-14T09:37:29.792072+02:00 RPi1 otbr-firewall[4445]: + firewall_start 2024-05-14T09:37:29.792122+02:00 RPi1 otbr-firewall[4445]: + firewall_stop 2024-05-14T09:37:29.792163+02:00 RPi1 otbr-firewall[4445]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:29.793778+02:00 RPi1 otbr-firewall[4451]: ip6tables v1.8.9 (nf_tables): Chain 'OTBR_FORWARD_INGRESS' does not exist 2024-05-14T09:37:29.793934+02:00 RPi1 otbr-firewall[4451]: Try ip6tables -h' or 'ip6tables --help' for more information.
2024-05-14T09:37:29.794016+02:00 RPi1 otbr-firewall[4445]: + ip6tables -L OTBR_FORWARD_INGRESS
2024-05-14T09:37:29.796577+02:00 RPi1 otbr-firewall[4452]: ip6tables v1.8.9 (nf_tables): chain OTBR_FORWARD_INGRESS' in table filter' is incompatible, use 'nft' tool.
2024-05-14T09:37:29.796764+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-deny-src
2024-05-14T09:37:29.796817+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-deny-src
2024-05-14T09:37:29.799013+02:00 RPi1 otbr-firewall[4453]: ipset v7.17: The set with the given name does not exist
2024-05-14T09:37:29.799186+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-deny-src-swap
2024-05-14T09:37:29.799236+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-deny-src-swap
2024-05-14T09:37:29.801449+02:00 RPi1 otbr-firewall[4454]: ipset v7.17: The set with the given name does not exist
2024-05-14T09:37:29.801638+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-allow-dst
2024-05-14T09:37:29.801688+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-allow-dst
2024-05-14T09:37:29.803893+02:00 RPi1 otbr-firewall[4455]: ipset v7.17: The set with the given name does not exist
2024-05-14T09:37:29.804077+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-allow-dst-swap
2024-05-14T09:37:29.804127+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-allow-dst-swap
2024-05-14T09:37:29.806268+02:00 RPi1 otbr-firewall[4456]: ipset v7.17: The set with the given name does not exist
2024-05-14T09:37:29.806403+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-deny-src hash:net family inet6
2024-05-14T09:37:29.808783+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-deny-src-swap hash:net family inet6
2024-05-14T09:37:29.811116+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-allow-dst hash:net family inet6
2024-05-14T09:37:29.813646+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-allow-dst-swap hash:net family inet6
2024-05-14T09:37:29.815987+02:00 RPi1 otbr-firewall[4445]: + ip6tables -N OTBR_FORWARD_INGRESS
2024-05-14T09:37:29.818691+02:00 RPi1 otbr-firewall[4445]: + ip6tables -I FORWARD 1 -o wpan0 -j OTBR_FORWARD_INGRESS
2024-05-14T09:37:29.821490+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -i wpan0 -j DROP
2024-05-14T09:37:29.824700+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-deny-src src -j DROP
2024-05-14T09:37:29.827935+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-allow-dst dst -j ACCEPT
2024-05-14T09:37:29.831166+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -j DROP
2024-05-14T09:37:29.834485+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -j ACCEPT
2024-05-14T09:37:29.838418+02:00 RPi1 systemd[1]: Started otbr-firewall.service - LSB: OTBR firewall.

I am about to give up.
Thanks for your help anyway.

from ot-br-posix.

You may try using avahi instead of mDNSResponder if you'd like to give it a try. Avahi is installed via package manager so it may be less error prone.

OTBR_MDNS=avahi ./script/setup

from ot-br-posix.