Re: [tlug] Is having no "iptables" bad?

[Evan Monroig <evan.monroig@example.com>]

Dave M G <martin@example.com> writes:
> dave@example.com:/usr/src/linux$ uname -a
> Linux homebase 2.6.17.7 #1 SMP Mon Jul 31 15:50:28 JST 2006 i686 GNU/Linux

When you compile your own kernel, IMHO it is always a good idea to
assign a subversion to it, so you know exactly which version of your
config files you are using.

If you build kernels "the debian way" (by using "fakeroot make-kpkg
kernel_image modules_image"), you can do this with the options
--append_to_version and --revision

One example:

$ fakeroot make-kpkg --append_to_version dave-2006.08.03-01 \
kernel_image modules_image

You can find more info on the debian help [1]

> dave@example.com:/usr/src/linux$ sudo modprobe ip_tables
> FATAL: Module ip_tables not found.
[snip]
> dave@example.com:/usr/src/linux$ modprobe -l | grep ip_
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_queue.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_tftp.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_proto_sctp.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_pptp.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_netlink.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_netbios_ns.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_irc.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_ftp.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack_amanda.ko
> /lib/modules/2.6.17.7/kernel/net/ipv4/netfilter/ip_conntrack.ko

I don't see any module with a name like ip_tables here, so that may be
the reason (see below).

>> 3) this one if you want to show us how you configured the iptables part
>> of your kernel
> dave@example.com:/usr/src/linux$ grep -i ip_ .config
[snip]
> # CONFIG_IP_NF_IPTABLES is not set

I think you need to set this option CONFIG_IP_NF_IPTABLES to 'm' if you
want the module ip_tables.

Evan

[1] http://www.debian.org/doc/manuals/reference/ch-kernel.en.html