| View previous topic :: View next topic |
| Author |
Message |
raulassis
n00b
Joined: 07 Jul 2003
Posts: 26
Location: Lisbon, Portugal
|
 Posted: Wed Jul 16, 2003 11:11 pm Post subject: Problem configuring firewall |
 |
|
Hi guys,
I emerged Shorewall but everytime I try to start it, modprobe complains that can't locate module ip_tables. I searched all over the kernel config and I can't find any ip_tables module. Maybe is some alias that I'm missing in/etc/ modules.conf.
Please help!! |
|
| Back to top |
|
 |
Jimbow
Guru
Joined: 18 Feb 2003
Posts: 597
Location: Silver City, NM
|
| Posted: Wed Jul 16, 2003 11:40 pm Post subject: |
|
|
| Code: |
Networking options --->
[*] Network packet filtering (replaces ipchains)
IP: Netfilter Configuration --->
<*> Connection tracking (required for masq/NAT)
<*> FTP protocol support
< > Amanda protocol support
<*> TFTP protocol support
<*> IRC protocol support
< > Userspace queueing via NETLINK (EXPERIMENTAL)
<*> IP tables support (required for filtering/masq/NAT)
<*> limit match support
<*> MAC address match support
<*> Packet type match support
<*> netfilter MARK match support
<*> Multiple port match support
<*> TOS match support
< > recent match support
<*> ECN match support
< > DSCP match support
< > AH/ESP match support
< > LENGTH match support
<*> TTL match support
< > tcpmss match support
< > Helper match support
<*> Connection state match support
<*> Connection tracking match support
< > Unclean match support (EXPERIMENTAL)
< > Owner match support (EXPERIMENTAL)
<*> Packet filtering
<*> REJECT target support
<*> MIRROR target support (EXPERIMENTAL)
<*> Full NAT
<*> MASQUERADE target support
<*> REDIRECT target support
[ ] NAT of local connections (READ HELP)
< > Basic SNMP-ALG support (EXPERIMENTAL)
<*> Packet mangling
<*> TOS target support
<*> ECN target support
<*> DSCP target support
<*> MARK target support
<*> LOG target support
<*> ULOG target support |
Works for me. The options available will change depending on what kernel you are compiling.
_________________
After Perl everything else is just assembly language. |
|
| Back to top |
|
|
raulassis
n00b
Joined: 07 Jul 2003
Posts: 26
Location: Lisbon, Portugal
|
| Posted: Thu Jul 17, 2003 9:55 am Post subject: |
|
|
Thanks Jimbow,
Although your kernel configuration is different of mine (for instance I have things like "QuakeIII protocol support") I managed to configure the kernel build to support iptables.
When I'm making modules I get a compile error from one of the modules: "trealms match support". No problem, I disbale it and now it should compile. |
|
| Back to top |
|
|
|
Networking & Security
