| View previous topic :: View next topic |
| Author |
Message |
divined
Apprentice
Joined: 23 Jul 2004
Posts: 165
|
 Posted: Fri Apr 20, 2007 7:03 pm Post subject: shorewall problem with 2.6.20 kernel |
 |
|
Hello everybody
Just a while ago I upgraded to the 2.6.20-gentoo-r6 kernel version from version 2.6.19-gentoo-r5. Unfortunately, I now have a problem with shorewall. Specifically, when I try to start it I get the error :
| Code: |
ERROR: Rule "DNAT net loc:192.168.1.100 tcp ##" requires NAT which is disabled
|
Has something changed in the kernel config regarding NAT? Do I need to add some new kernel support or module?
George Papadopoulos |
|
| Back to top |
|
 |
terminal9
Apprentice
Joined: 12 Oct 2006
Posts: 157
|
| Posted: Fri Apr 20, 2007 8:20 pm Post subject: |
|
|
Yes, I noticed some netfilter related changes in .20
A practical way to observe what has changed is to copy your old .config and run
You'll get prompts about changes, enable as necessary. Then do make && make modules_install ... etc |
|
| Back to top |
|
|
Ehnvis
Guru
Joined: 13 Jun 2006
Posts: 305
Location: /dev/random
|
| Posted: Sat Apr 21, 2007 6:33 am Post subject: |
|
|
The Full Nat option that you need has been moved, and for some reason make oldconfig doesnt say anything.
Look under ipfilter configuration and add it, recompile the kernel and it should work.
_________________
HP NC 4010, Pentium-M 725 1.6GHz w/ 1Gb RAM, 60Gb Hitachi Travelstar.
Running Gentoo-2.6.21-r4 (again as 2.6.22 kernels hogs CPU), all but SD reader works fine. |
|
| Back to top |
|
|
divined
Apprentice
Joined: 23 Jul 2004
Posts: 165
|
| Posted: Sat Apr 21, 2007 7:07 am Post subject: |
|
|
| I`m looking under some netfilter options but can find nothing relative. Am I not looking in the correct subsection? |
|
| Back to top |
|
|
Ehnvis
Guru
Joined: 13 Jun 2006
Posts: 305
Location: /dev/random
|
| Posted: Sat Apr 21, 2007 7:29 am Post subject: |
|
|
Under IP netfilter configuration activate IPv4 connection tracking support and then Full NAT shows up under IP tables support. Add that and then recompile and everything should be fine.
_________________
HP NC 4010, Pentium-M 725 1.6GHz w/ 1Gb RAM, 60Gb Hitachi Travelstar.
Running Gentoo-2.6.21-r4 (again as 2.6.22 kernels hogs CPU), all but SD reader works fine. |
|
| Back to top |
|
|
divined
Apprentice
Joined: 23 Jul 2004
Posts: 165
|
| Posted: Sat Apr 21, 2007 7:40 pm Post subject: |
|
|
| thanks. I hadn`t activated some options in the kernel config. The really odd thing is how it used to work with the 2.6.19 version kernel. |
|
| Back to top |
|
|
Ehnvis
Guru
Joined: 13 Jun 2006
Posts: 305
Location: /dev/random
|
| Posted: Sun Apr 22, 2007 5:54 am Post subject: |
|
|
It's not that odd, it's just the guys that writes the netfilters that are odd. Even Linus Torvalds didn't like this change and was quite mad at the developers.
_________________
HP NC 4010, Pentium-M 725 1.6GHz w/ 1Gb RAM, 60Gb Hitachi Travelstar.
Running Gentoo-2.6.21-r4 (again as 2.6.22 kernels hogs CPU), all but SD reader works fine. |
|
| Back to top |
|
|
|
Kernel & Hardware
