Iptables

stephenry · n00b Joined: 27 May 2003 Posts: 25

Hi all,

I've got a bad case of the iptables blues... I'm trying to set up a small home network. I've got gentoo running on an old p2-266 and windows xp on my athlon. I want to set my network up so that my gentoo box acts as a gateway to the internet (through my cable modem) and my xp box connects through it. Ideally i would like to set up a DHCP server on it as well (but i'll leave that for another day!)

I've been told that in order to achieve this i need to install iptables, but i'm not having much luck achieving this. I've went into my kernel setup, and made sure that i'm installing the netfilter into the kernel (tried with both modules and as part of the kernel). I've also emerged sys-firewall/iptables into my system. When i try to run iptables it says that it isn't present and that i need to insmod. I've tried insmoding the kernel modules in my /net/ipv4/netfilter directory, but i get lots of unresolved function errors (which makes me think that i isn't configured in my kernel).

I've installed the standard gentoo-sources kernel and everything else works fine. I've compiled the kernel a good few times, once even selecting all components in the netfilter menu -but to no avail. Could someone please help me figure this one out! Compiling a kernel on a p2 is terribly slow!

Steve.

jbc28 · Posted: Fri May 30, 2003 11:16 am Post subject:

when you rebuild the kernel are you including all the options for netfilter? Just including netfilter on its own won't be enough.
This site might help (I was having similar problems until this morning)
https://forums.gentoo.org/viewtopic.php?t=41446&highlight=iptables+kernel+options

good luck!

fatcat.00 · Tux's lil' helper Joined: 12 Aug 2002 Posts: 145

It sounds like you didn't copy /usr/src/linux/arch/i386/boot/bzImage to /boot OR your grub/lilo isn't setup to point to the new bzImage file.

In other words, you are still booting from the old kernel image but it isn't setup for the netfilter modules, thus the "bad symbol" messages.

Verify /boot/bzImage is has the correct timestamp and post again.
_________________
-- Fatcat

stephenry · n00b Joined: 27 May 2003 Posts: 25

Hi guys,

thanks for the response.... I tried recompiling my kernel with *all* the netfilter options compiled into the kernel (not modules). Now, however, the compilation stops, with errors, when trying to compile the netfilter stuff (structure has no member named 'tclassid'). Do i need to patch my kernel to use it, or is it already present in the kernel?

Steve

jbc28 · Posted: Fri May 30, 2003 1:08 pm Post subject:

I didn't do anything odd, just used the gentoo kernel source 2.4.20-5.
I could email you my .config file if you'd like?

uzik · Apprentice Joined: 17 Apr 2003 Posts: 257

stephenry · n00b Joined: 27 May 2003 Posts: 25

Hi Guys,

Thanks for all the help! :-)

I've finally found what was causing the problem. Apparently their is something wrong with the kernel's "make dep" script. If you have already built a kernel without iptables, when to try an rebuild it with, make won't bring in the right dependancies. I solved this by deleting the kernel libraries in the /lib directory and doing a make mrproper.

Cheers