[opensuse-factory] How can calibre be allowed access through YaST firewall?
Unlike rsync, or KDE Connect, there is no option to automatically allow the Calibre ebook manager to open ports so external devices can connect to it. So far, my solution has been to disable the firewall before connecting my device to Calibre via the Calibre Companion app on Android. For those unfamiliar with the process, Calibre Companion can sync ebooks from the desktop's library to the Android device's library, thus eliminating the need for wires and further organization of books. If I know I am using port 9090 for Calibre, is there a way to allow this connection in the Firewall? Has anyone else attempted this setup? Running netstat shows this additional parameter enabled when my tablet is connected to the computer. tcp 0 0 10.42.0.1%2457529:39858 10.42.0.250%328:sesi-lm ESTABLISHED
Seems the first step if it is not already setup is to configure you adapter to be on a zone for which you will configure ports. If that's already done move on. Allowed Services -> Advanced to manually enter ports (not sure if calibre uses tpc or udp or both) Quick demo video: https://www.youtube.com/watch?v=Yw1JTTCnUTo -- Jimmy On Sat, Nov 21, 2015 at 2:07 AM, Chan Ju Ping <email@chanjp.me> wrote:
Unlike rsync, or KDE Connect, there is no option to automatically allow the Calibre ebook manager to open ports so external devices can connect to it. So far, my solution has been to disable the firewall before connecting my device to Calibre via the Calibre Companion app on Android.
For those unfamiliar with the process, Calibre Companion can sync ebooks from the desktop's library to the Android device's library, thus eliminating the need for wires and further organization of books.
If I know I am using port 9090 for Calibre, is there a way to allow this connection in the Firewall? Has anyone else attempted this setup?
Running netstat shows this additional parameter enabled when my tablet is connected to the computer.
tcp 0 0 10.42.0.1%2457529:39858 10.42.0.250%328:sesi-lm ESTABLISHED -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Fixed some small things and pruned/cleaned out platform.sh config. Also added another patch to core for status dection of mbstring in php 5.6 is broken. I cam up with the following (in my notes) deployment plan: - PREGAME: payment info - deploy latest make file - put old site into maintenance mode - rsync files - rsync database & import - drush cc all - set solr settings @ admin/config/search/apachesolr - host: solr.internal - port: 8080 - path: /solr - reindex solr - drush solr-delete-index && drush solr-mark-all && drush solr-index - verify new site - update dns records - shutdown ami -- Jimmy On Sat, Nov 21, 2015 at 2:39 AM, Jimmy Berry <jimmy@boombatower.com> wrote:
Seems the first step if it is not already setup is to configure you adapter to be on a zone for which you will configure ports. If that's already done move on.
Allowed Services -> Advanced to manually enter ports (not sure if calibre uses tpc or udp or both)
Quick demo video: https://www.youtube.com/watch?v=Yw1JTTCnUTo
-- Jimmy
On Sat, Nov 21, 2015 at 2:07 AM, Chan Ju Ping <email@chanjp.me> wrote:
Unlike rsync, or KDE Connect, there is no option to automatically allow the Calibre ebook manager to open ports so external devices can connect to it. So far, my solution has been to disable the firewall before connecting my device to Calibre via the Calibre Companion app on Android.
For those unfamiliar with the process, Calibre Companion can sync ebooks from the desktop's library to the Android device's library, thus eliminating the need for wires and further organization of books.
If I know I am using port 9090 for Calibre, is there a way to allow this connection in the Firewall? Has anyone else attempted this setup?
Running netstat shows this additional parameter enabled when my tablet is connected to the computer.
tcp 0 0 10.42.0.1%2457529:39858 10.42.0.250%328:sesi-lm ESTABLISHED -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hi,
If I know I am using port 9090 for Calibre, is there a way to allow this connection in the Firewall? Has anyone else attempted this setup?
Create a file /etc/sysconfig/SuSEfirewall2.d/services/calibre ( name can be anything, but calibre make it clear what the service is ) with the following content ## Name: calibre ## Description: Open ports for Calibre Companion TCP="1090" This should be enough to have it picked up by YaST. If it works and you're familiar with obs, consider submitting this change to the calibre package [1] Thanks, Robert [1]: https://build.opensuse.org/package/show/Documentation:Tools/calibre -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Saturday, November 21, 2015 11:55:39 AM Robert Munteanu wrote:
Create a file /etc/sysconfig/SuSEfirewall2.d/services/calibre
( name can be anything, but calibre make it clear what the service is )
with the following content
## Name: calibre ## Description: Open ports for Calibre Companion
TCP="1090"
This should be enough to have it picked up by YaST. If it works and you're familiar with obs, consider submitting this change to the calibre package [1]
Thanks,
Robert
[1]: https://build.opensuse.org/package/show/Documentation:Tools/calibre
Thanks for the guide. I have tried manually opening tcp port 9090 as calibre asks for, and it didn't work. I am basing the 9090 number on the Connect/share
Start wireless device connection in calibre.
I have created the services config file as well, but this time, opening a range of ports on TCP, UDP and Broadcast. Unfortunately, it is still not working. --- ## Name: calibre ## Description: Open ports for Calibre Companion # space separated list of allowed TCP ports TCP="9000 9001 9002 9003 9004 9005 9006 9007 9008 9009 9010 9011 9012 9013 9014 9015 9016 9017 9018 9019 9020 9021 9022 9023 9024 9025 9026 9027 9028 9029 9030 9031 9032 9033 9034 9035 9036 9037 9038 9039 9040 9041 9042 9043 9044 9045 9046 9047 9048 9049 9050 9051 9052 9053 9054 9055 9056 9057 9058 9059 9060 9061 9062 9063 9064 9065 9066 9067 9068 9069 9070 9071 9072 9073 9074 9075 9076 9077 9078 9079 9080 9081 9082 9083 9084 9085 9086 9087 9088 9089 9090" # space separated list of allowed UDP ports UDP="9000 9001 9002 9003 9004 9005 9006 9007 9008 9009 9010 9011 9012 9013 9014 9015 9016 9017 9018 9019 9020 9021 9022 9023 9024 9025 9026 9027 9028 9029 9030 9031 9032 9033 9034 9035 9036 9037 9038 9039 9040 9041 9042 9043 9044 9045 9046 9047 9048 9049 9050 9051 9052 9053 9054 9055 9056 9057 9058 9059 9060 9061 9062 9063 9064 9065 9066 9067 9068 9069 9070 9071 9072 9073 9074 9075 9076 9077 9078 9079 9080 9081 9082 9083 9084 9085 9086 9087 9088 9089 9090" # space separated list of allowed UDP ports that accept broadcasts BROADCAST="9000 9001 9002 9003 9004 9005 9006 9007 9008 9009 9010 9011 9012 9013 9014 9015 9016 9017 9018 9019 9020 9021 9022 9023 9024 9025 9026 9027 9028 9029 9030 9031 9032 9033 9034 9035 9036 9037 9038 9039 9040 9041 9042 9043 9044 9045 9046 9047 9048 9049 9050 9051 9052 9053 9054 9055 9056 9057 9058 9059 9060 9061 9062 9063 9064 9065 9066 9067 9068 9069 9070 9071 9072 9073 9074 9075 9076 9077 9078 9079 9080 9081 9082 9083 9084 9085 9086 9087 9088 9089 9090 ---
On Sat, Nov 21, 2015 at 6:51 PM, Chan Ju Ping <email@chanjp.me> wrote:
On Saturday, November 21, 2015 11:55:39 AM Robert Munteanu wrote:
Create a file /etc/sysconfig/SuSEfirewall2.d/services/calibre
( name can be anything, but calibre make it clear what the service is )
with the following content
## Name: calibre ## Description: Open ports for Calibre Companion
TCP="1090"
This should be enough to have it picked up by YaST. If it works and you're familiar with obs, consider submitting this change to the calibre package [1]
Thanks,
Robert
[1]: https://build.opensuse.org/package/show/Documentation:Tools/calibre
Thanks for the guide. I have tried manually opening tcp port 9090 as calibre asks for, and it didn't work. I am basing the 9090 number on the Connect/share
Start wireless device connection in calibre.
I have created the services config file as well, but this time, opening a range of ports on TCP, UDP and Broadcast. Unfortunately, it is still not working.
Just to make sure, after saving this file did you run `yast firewall` and add the new 'calibre' service to the list of allowed services? This file only makes the firewall module aware of the module, it does not generate the iptables rules. If in doubt, use `iptables -L -v` to verify that the rules are indeed applied.
--- ## Name: calibre ## Description: Open ports for Calibre Companion
# space separated list of allowed TCP ports TCP="9000 9001 9002 9003 9004 9005 9006 9007 9008 9009 9010 9011 9012 9013 9014 9015 9016 9017 9018 9019 9020 9021 9022 9023 9024 9025 9026 9027 9028 9029 9030 9031 9032 9033 9034 9035 9036 9037 9038 9039 9040 9041 9042 9043 9044 9045 9046 9047 9048 9049 9050 9051 9052 9053 9054 9055 9056 9057 9058 9059 9060 9061 9062 9063 9064 9065 9066 9067 9068 9069 9070 9071 9072 9073 9074 9075 9076 9077 9078 9079 9080 9081 9082 9083 9084 9085 9086 9087 9088 9089 9090"
FYI, that can be condensed as TCP="9000:9090" Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Saturday, November 21, 2015 10:35:56 PM Robert Munteanu wrote:
On Sat, Nov 21, 2015 at 6:51 PM, Chan Ju Ping <email@chanjp.me> wrote:
On Saturday, November 21, 2015 11:55:39 AM Robert Munteanu wrote:
Create a file /etc/sysconfig/SuSEfirewall2.d/services/calibre
( name can be anything, but calibre make it clear what the service is )
with the following content
## Name: calibre ## Description: Open ports for Calibre Companion
TCP="1090"
This should be enough to have it picked up by YaST. If it works and you're familiar with obs, consider submitting this change to the calibre package [1]
Thanks,
Robert
[1]: https://build.opensuse.org/package/show/Documentation:Tools/calibre
Thanks for the guide. I have tried manually opening tcp port 9090 as calibre asks for, and it didn't work. I am basing the 9090 number on the Connect/share>
Start wireless device connection in calibre.
I have created the services config file as well, but this time, opening a range of ports on TCP, UDP and Broadcast. Unfortunately, it is still not working.
Just to make sure, after saving this file did you run `yast firewall` and add the new 'calibre' service to the list of allowed services? This file only makes the firewall module aware of the module, it does not generate the iptables rules.
If in doubt, use `iptables -L -v` to verify that the rules are indeed applied.
Yes, I did enable the service in YaST. Then confirmed it was still not working because of the firewall. I have also restarted the machine after applying the new rules.
--- ## Name: calibre ## Description: Open ports for Calibre Companion
# space separated list of allowed TCP ports TCP="9000 9001 9002 9003 9004 9005 9006 9007 9008 9009 9010 9011 9012 9013 9014 9015 9016 9017 9018 9019 9020 9021 9022 9023 9024 9025 9026 9027 9028 9029 9030 9031 9032 9033 9034 9035 9036 9037 9038 9039 9040 9041 9042 9043 9044 9045 9046 9047 9048 9049 9050 9051 9052 9053 9054 9055 9056 9057 9058 9059 9060 9061 9062 9063 9064 9065 9066 9067 9068 9069 9070 9071 9072 9073 9074 9075 9076 9077 9078 9079 9080 9081 9082 9083 9084 9085 9086 9087 9088 9089 9090"
FYI, that can be condensed as
TCP="9000:9090"
Robert
Thanks. That does condense the coding significantly. Incidentally, I should mention I created a temporary shared wireless network from my computer, meaning my tablet was connected to the computer's network without going through a router.
On Sun, Nov 22, 2015 at 2:32 AM, Chan Ju Ping <email@chanjp.me> wrote:
On Saturday, November 21, 2015 10:35:56 PM Robert Munteanu wrote:
On Sat, Nov 21, 2015 at 6:51 PM, Chan Ju Ping <email@chanjp.me> wrote:
On Saturday, November 21, 2015 11:55:39 AM Robert Munteanu wrote:
Create a file /etc/sysconfig/SuSEfirewall2.d/services/calibre
( name can be anything, but calibre make it clear what the service is )
with the following content
## Name: calibre ## Description: Open ports for Calibre Companion
TCP="1090"
This should be enough to have it picked up by YaST. If it works and you're familiar with obs, consider submitting this change to the calibre package [1]
Thanks,
Robert
[1]: https://build.opensuse.org/package/show/Documentation:Tools/calibre
Thanks for the guide. I have tried manually opening tcp port 9090 as calibre asks for, and it didn't work. I am basing the 9090 number on the Connect/share>
Start wireless device connection in calibre.
I have created the services config file as well, but this time, opening a range of ports on TCP, UDP and Broadcast. Unfortunately, it is still not working.
Just to make sure, after saving this file did you run `yast firewall` and add the new 'calibre' service to the list of allowed services? This file only makes the firewall module aware of the module, it does not generate the iptables rules.
If in doubt, use `iptables -L -v` to verify that the rules are indeed applied.
Yes, I did enable the service in YaST. Then confirmed it was still not working because of the firewall. I have also restarted the machine after applying the new rules.
Then my only recommendation is to experiment with iptables and find out which changes you need to perform, and then translate them into a config file like the one I suggested. Robert
--- ## Name: calibre ## Description: Open ports for Calibre Companion
# space separated list of allowed TCP ports TCP="9000 9001 9002 9003 9004 9005 9006 9007 9008 9009 9010 9011 9012 9013 9014 9015 9016 9017 9018 9019 9020 9021 9022 9023 9024 9025 9026 9027 9028 9029 9030 9031 9032 9033 9034 9035 9036 9037 9038 9039 9040 9041 9042 9043 9044 9045 9046 9047 9048 9049 9050 9051 9052 9053 9054 9055 9056 9057 9058 9059 9060 9061 9062 9063 9064 9065 9066 9067 9068 9069 9070 9071 9072 9073 9074 9075 9076 9077 9078 9079 9080 9081 9082 9083 9084 9085 9086 9087 9088 9089 9090"
FYI, that can be condensed as
TCP="9000:9090"
Robert
Thanks. That does condense the coding significantly.
Incidentally, I should mention I created a temporary shared wireless network from my computer, meaning my tablet was connected to the computer's network without going through a router.
-- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Friday, November 27, 2015 5:16:37 PM CDT Robert Munteanu wrote:
Then my only recommendation is to experiment with iptables and find out which changes you need to perform, and then translate them into a config file like the one I suggested.
Robert
It's been close to a year, and I have finally figured out how to get Calibre and Calibre Companion to communicate through the Firewall. I have something further to add, which is that Calibre's debug mode gives the following output when I attempt to set up a wireless device connection: --- SMART_DEV ( 0.00: 0.001) _attach_to_port try ip address "" on port 9045 SMART_DEV ( 0.88: 0.825) startup_on_demand listening on port 9045 SMART_DEV ( 0.88: 0.001) _attach_to_port try ip address "" on port 54982 SMART_DEV ( 0.88: 0.000) startup_on_demand broadcast socket listening on port 54982 SMART_DEV ( 1.89: 1.005) run All IP addresses {'lo': [{'peer': '127.0.0.1', 'netmask': '255.0.0.0', 'addr': '127.0.0.1'}], 'enp5s0': [{'broadcast': '192.168.2.255', 'netmask': '255.255.255.0', 'addr': '192.168.2.6'}], 'tun0': [{'peer': '10.10.19.255', 'netmask': '255.255.252.0', 'addr': '10.10.16.78'}]} --- I have alread set up the following module as described in the last few emails in this thread. --- ## Name: calibre ## Description: Open ports for Calibre Companion # space separated list of allowed TCP ports TCP= "8080 9045 9090 54982" # space separated list of allowed UDP ports UDP= "8080 9045 9090 54982" # space separated list of allowed UDP ports that accept broadcasts BROADCAST= "8080 9045 9090 54982" --- My mistake was adding the calibre module to the External Zone. I assumed it belonged there because it is the first zone to pop up when I clicked on Allowed Services, and I am allowing KDE Connect and Rsync in this tab as well. For reasons I hope someone will enlighted me on, allowing Calibre through the Demilitarized Zone allows me to transfer my ebooks through the ports I have now defined through the calibre module, which are 8080, 9045, 9090, and 54982 (based upon the debug). I hope this helps anyone who is having trouble with this setup.
participants (3)
-
Chan Ju Ping -
Jimmy Berry -
Robert Munteanu