| View previous topic :: View next topic |
| Author |
Message |
Radi
Tux's lil' helper
Joined: 09 Jul 2002
Posts: 108
|
 Posted: Tue Sep 24, 2002 9:53 am Post subject: Iptables prob |
 |
|
when i type modprobe ip_tables i get the following error
/lib/modules/2.4.19-xfs-r1/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_unregister_sockopt
/lib/modules/2.4.19-xfs-r1/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_register_sockopt
/lib/modules/2.4.19-xfs-r1/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.19-xfs-r1/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.19-xfs-r1/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
whats the problem here, did i miss somthing in the kernel config? |
|
| Back to top |
|
 |
rac
Bodhisattva
Joined: 30 May 2002
Posts: 6553
Location: Japanifornia
|
| Posted: Tue Sep 24, 2002 10:11 am Post subject: Re: Iptables prob |
|
|
| Radi wrote: | | whats the problem here, did i miss somthing in the kernel config? |
Possibly. What's the setting of Networking options -> Network packet filtering (replaces ipchains)?
_________________
For every higher wall, there is a taller ladder |
|
| Back to top |
|
|
Radi
Tux's lil' helper
Joined: 09 Jul 2002
Posts: 108
|
| Posted: Tue Sep 24, 2002 10:25 am Post subject: |
|
|
<*> Packet socket
[ ] Packet socket: mmapped IO
< > Netlink device emulation
[*] Network packet filtering (replaces ipchains)
[ ] Network packet filtering debugging
[*] Socket Filtering
<*> Unix domain sockets
[*] TCP/IP networking
[*] IP: multicasting
[ ] IP: advanced router
[ ] IP: kernel level autoconfiguration
< > IP: tunneling
< > IP: GRE tunnels over IP
[ ] IP: multicast routing
[ ] IP: ARP daemon support (EXPERIMENTAL)
[ ] IP: TCP Explicit Congestion Notification support
[ ] IP: TCP syncookie support (disabled per default)
IP: Netfilter Configuration --->
<M> The IPv6 protocol (EXPERIMENTAL)
IPv6: Netfilter Configuration --->
<M> Kernel httpd acceleration (EXPERIMENTAL)
[ ] Asynchronous Transfer Mode (ATM) (EXPERIMENTAL)
< > 802.1Q VLAN Support
---
< > The IPX protocol
< > Appletalk protocol support
Appletalk devices --->
<M> DECnet Support
[ ] DECnet: SIOCGIFCONF support
[ ] DECnet: router support (EXPERIMENTAL)
< > 802.1d Ethernet Bridging
< > CCITT X.25 Packet Layer (EXPERIMENTAL)
< > LAPB Data Link Driver (EXPERIMENTAL)
[ ] 802.2 LLC (EXPERIMENTAL)
[ ] Frame Diverter (EXPERIMENTAL)
< > Acorn Econet/AUN protocols (EXPERIMENTAL)
< > WAN router
[ ] Fast switching (read help!)
[ ] Forwarding between high speed interfaces
Last edited by Radi on Tue Sep 24, 2002 10:49 am; edited 1 time in total |
|
| Back to top |
|
|
rac
Bodhisattva
Joined: 30 May 2002
Posts: 6553
Location: Japanifornia
|
| Posted: Tue Sep 24, 2002 10:49 am Post subject: |
|
|
| Radi wrote: | | [*] Network packet filtering (replaces ipchains) |
Hmm. Not the answer I was looking for. I show the definition of nf_unregister_sockopt to be in net/core/netfilter.c. Is your machine fast enough that kernel compiles are not a burden to you? If so, may I recommend: | Code: | $ cd /usr/src/linux
$ cp .config ~/
$ make mrproper
$ cp ~/.config ./
$ make dep
$ make bzImage
$ make modules
$ make modules_install |
...and then install this kernel? It could be a stale dependency problem, if you have been changing lots of things around.
One other thing would be to make sure that the bzImage in /boot is really the one that you think it is. Could failure to mount /boot when copying your newly minted kernel over have bitten you?
_________________
For every higher wall, there is a taller ladder |
|
| Back to top |
|
|
Radi
Tux's lil' helper
Joined: 09 Jul 2002
Posts: 108
|
| Posted: Tue Sep 24, 2002 10:59 am Post subject: |
|
|
[quote="rac"] | Radi wrote: |
One other thing would be to make sure that the bzImage in /boot is really the one that you think it is. Could failure to mount /boot when copying your newly minted kernel over have bitten you? |
at first i thought the same thing but after i had cecked grubs menu.lst iam pretty sure that this is the correct image.
but i will try this instructions, it is a k6/2 450 webserver, and without iptables it isn't going anywhere!!! |
|
| Back to top |
|
|
rac
Bodhisattva
Joined: 30 May 2002
Posts: 6553
Location: Japanifornia
|
| Posted: Tue Sep 24, 2002 11:10 am Post subject: |
|
|
| Radi wrote: | | at first i thought the same thing but after i had cecked grubs menu.lst iam pretty sure that this is the correct image. |
It's not really a GRUB thing. When you are booted from this dubious kernel, run "uname -a". Make sure that the version matches what you think it ought to be, and that the compilation time matches when you think you compiled the kernel.
_________________
For every higher wall, there is a taller ladder |
|
| Back to top |
|
|
Radi
Tux's lil' helper
Joined: 09 Jul 2002
Posts: 108
|
| Posted: Tue Sep 24, 2002 11:15 am Post subject: |
|
|
| thats also correct |
|
| Back to top |
|
|
klieber
Bodhisattva
Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA
|
| Posted: Tue Sep 24, 2002 12:17 pm Post subject: |
|
|
| Radi wrote: | when i type modprobe ip_tables i get the following error
... |
| Radi wrote: | | [*] Network packet filtering (replaces ipchains) |
You have iptables compiled into the kernel, not as a module -- why are you modprobing in the first place?
| Radi wrote: | | IP: Netfilter Configuration ---> |
What have you defined in this subsection?
--kurt
_________________
The problem with political jokes is that they get elected |
|
| Back to top |
|
|
Radi
Tux's lil' helper
Joined: 09 Jul 2002
Posts: 108
|
| Posted: Tue Sep 24, 2002 12:32 pm Post subject: |
|
|
| ok, mr proper worked very well, now i hove locked my self out *g* |
|
| Back to top |
|
|
Tuna
Guru
Joined: 19 Jul 2002
Posts: 485
Location: Berlin
|
| Posted: Tue Sep 24, 2002 1:35 pm Post subject: |
|
|
https://forums.gentoo.org/viewtopic.php?t=1008&highlight=iptables
this is a well known issue, and an annoying one indeed. also 'make mrproper' does not seem to help everytime. this looks like a kernel source problem right? i really hope someone fixes this in near future.
some similar things happend to me while trying to get vfat module support. |
|
| Back to top |
|
|
|
Networking & Security
