| View previous topic :: View next topic |
| Author |
Message |
playahater
Guru
Joined: 02 Jul 2005
Posts: 382
Location: Serbia
|
 Posted: Mon Oct 17, 2005 2:46 pm Post subject: Guarddog and iptables quick question [SOLVED] |
 |
|
I have guarddog .. and have configured all permission protocols for iptables .. and when I want to save configuration .. it sais:
| Code: | Using iptables.
Resetting firewall rules.
Loading kernel modules.
FATAL: Module ip_conntrack_irc not found.
Setting kernel parameters.
FATAL: Module ip_conntrack_ftp not found.
Configuring firewall rules.
Finished. |
Have three questions ..
First- Is guarddog or better say iptables working OK ..
Second - If not .. do i need to recompile kernel in order to fix it or is there any other solution??
Third - Do I need to do "rc-update add iptables default" .. in order to have firewall security uppon boot .. or it is working without it ?? (maybe dumb question .. but .. i had to ask  )
_________________
http://droopia.net
Last edited by playahater on Sat Oct 29, 2005 10:55 pm; edited 1 time in total |
|
| Back to top |
|
 |
nlindblad
Guru
Joined: 30 Jun 2005
Posts: 476
Location: Lund, Sweden
|
| Posted: Mon Oct 17, 2005 3:53 pm Post subject: |
|
|
I can answer the third at least: yes, after you've set the rules for iptables, use the command:
That will save your rules, and the command:
| Code: | | rc-update add iptables default |
Will make them apply at every boot. |
|
| Back to top |
|
|
magic919
Advocate
Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK
|
| Posted: Mon Oct 17, 2005 6:55 pm Post subject: |
|
|
I'd reconfig and build a new kernel. But you could build modules and load those.
Then it should all work. |
|
| Back to top |
|
|
playahater
Guru
Joined: 02 Jul 2005
Posts: 382
Location: Serbia
|
| Posted: Wed Oct 19, 2005 12:57 pm Post subject: |
|
|
Aha .. OK .. but .. are iptables running correctly now .. or not .. ??
Am I protected .. or not .. ?
I`ll try to make only neccesarry modules ..
_________________
http://droopia.net |
|
| Back to top |
|
|
nlindblad
Guru
Joined: 30 Jun 2005
Posts: 476
Location: Lund, Sweden
|
| Posted: Wed Oct 19, 2005 1:38 pm Post subject: |
|
|
| playahater wrote: | Aha .. OK .. but .. are iptables running correctly now .. or not .. ??
Am I protected .. or not .. ?
I`ll try to make only neccesarry modules .. |
Look at current rules using:
|
|
| Back to top |
|
|
playahater
Guru
Joined: 02 Jul 2005
Posts: 382
Location: Serbia
|
| Posted: Wed Oct 19, 2005 2:31 pm Post subject: |
|
|
| Code: |
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
|
During the boot .. i saw the red dot beside iptables line .. and some kind of warning .. something like ..
"no rules for iptables" .. init.d was mentioned too .. but didn`t see what exactly was written ..
any thoughts ??? .. how to fix it ??
_________________
http://droopia.net |
|
| Back to top |
|
|
magic919
Advocate
Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK
|
| Posted: Wed Oct 19, 2005 2:37 pm Post subject: |
|
|
You need to sort out the kernel modules.
Then do the rules.
Then save them - which it will prompt you to do if you /etc/init.d/iptables restart.
Then you are sorted. |
|
| Back to top |
|
|
playahater
Guru
Joined: 02 Jul 2005
Posts: 382
Location: Serbia
|
| Posted: Wed Oct 19, 2005 3:38 pm Post subject: |
|
|
OK .. Thanx .. but one more thing ..
can you point me to some "building just modules" site tutorial ??
I thought i know to bild only neccesary modules bu .. i think don`t ..
as far as i have figured out .. i need to cd into the /usr/src/linux/blablabla ..ipcontrack .. and type make modules and make modules install .. and then just add those modules to startup modules config .. and then everytnng shout work just fine .. right ?? .. after that .. i can configure iptables without any problem ..
correct ??
_________________
http://droopia.net |
|
| Back to top |
|
|
magic919
Advocate
Joined: 17 Jun 2005
Posts: 2182
Location: Berkshire, UK
|
|
| Back to top |
|
|
|
Networking & Security
