* ipsec01-02-03-04 installation problem
@ 2006-01-18 23:19 webmaster @ elnportal.it
2006-01-19 8:52 ` Marco Berizzi
0 siblings, 1 reply; 8+ messages in thread
From: webmaster @ elnportal.it @ 2006-01-18 23:19 UTC (permalink / raw)
To: netfilter-devel
Hi to all, I've read that with ipsec patches applied to kernel I can do
SNA=
T with tunneling that doesn't use virtual interface (like openswan on 2.6.1=
4 kernel without klips)
How can I obtain these patches ?
How can I apply it to kernel ?
Should I recompile iptables from tarball after applying these patches ?
I've read that there is a patch o matic, but I'm not able to download it...=
.
Please help
By
^ permalink raw reply [flat|nested] 8+ messages in thread
* RE: ipsec01-02-03-04 installation problem
2006-01-18 23:19 ipsec01-02-03-04 installation problem webmaster @ elnportal.it
@ 2006-01-19 8:52 ` Marco Berizzi
2006-01-19 18:05 ` webmaster @ elnportal.it
2006-01-22 12:57 ` webmaster @ elnportal.it
0 siblings, 2 replies; 8+ messages in thread
From: Marco Berizzi @ 2006-01-19 8:52 UTC (permalink / raw)
To: webmaster, netfilter-devel; +Cc: netfilter
webmaster @ elnportal.it wrote:
>Hi to all, I've read that with ipsec patches applied to kernel I can do
>SNA=
Upgrade to 2.6.16-rc1. Those patches are now in the mainline kernel.
Also see
https://lists.netfilter.org/pipermail/netfilter-devel/2006-January/023002.html
You should upgrade to a current iptables snapshot version.
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: ipsec01-02-03-04 installation problem
2006-01-19 8:52 ` Marco Berizzi
@ 2006-01-19 18:05 ` webmaster @ elnportal.it
2006-01-19 18:19 ` Marco Berizzi
2006-01-22 12:57 ` webmaster @ elnportal.it
1 sibling, 1 reply; 8+ messages in thread
From: webmaster @ elnportal.it @ 2006-01-19 18:05 UTC (permalink / raw)
To: Marco Berizzi; +Cc: netfilter-devel
So I must install 2.6.16-rc1 kernel and then obtain dev version of netfilter
?
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: ipsec01-02-03-04 installation problem
2006-01-19 8:52 ` Marco Berizzi
@ 2006-01-22 12:57 ` webmaster @ elnportal.it
2006-01-22 12:57 ` webmaster @ elnportal.it
1 sibling, 0 replies; 8+ messages in thread
From: webmaster @ elnportal.it @ 2006-01-22 12:57 UTC (permalink / raw)
To: Marco Berizzi, netfilter-devel; +Cc: netfilter
Here the passages followed for installing iptables with SNAT support through
ipsec tunnel:
1_ Downloaded from kernel.org 2.6.16-rc1.tar.bz2 kernel
2_ untarred it to /usr/src
3_ make mrproper
4_ copy an old .config file from 2.6.14 sources (Fedora Core 4)
5_ ln -s linux-2.6.16-rc1/ linux
6_ make oldconfig (hitting enter on all query)
7_ make menuconfig
8_ XFRM [IPSec] Networking Security Hooks
9_ Exit and save kernel configuration
10_ make all
11_ make modules_install
12_ make install
13_ reboot
14_ rpm -e --nodep iptables
15_ untar tarball (snapshot of iptables)
16_ make (under src directory of iptables)
17_ make install
18_ iptables -L
iptables v1.3.4-20060121: can't initialize iptables table `filter': iptables
who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Seeking for modules under /lib/modules/2.6.16-rc1/kernel/net/ipv4/netfilter
I could see only
-rw-r--r-- 1 root root 196238 22 gen 14:15 ip_conntrack_amanda.ko
-rw-r--r-- 1 root root 227391 22 gen 14:15 ip_conntrack_ftp.ko
-rw-r--r-- 1 root root 208996 22 gen 14:15 ip_conntrack_irc.ko
-rw-r--r-- 1 root root 1136548 22 gen 14:15 ip_conntrack.ko
-rw-r--r-- 1 root root 167689 22 gen 14:15 ip_conntrack_netbios_ns.ko
-rw-r--r-- 1 root root 295709 22 gen 14:15 ip_conntrack_netlink.ko
-rw-r--r-- 1 root root 340536 22 gen 14:15 ip_conntrack_pptp.ko
-rw-r--r-- 1 root root 171796 22 gen 14:15 ip_conntrack_proto_sctp.ko
-rw-r--r-- 1 root root 193359 22 gen 14:15 ip_conntrack_tftp.ko
-rw-r--r-- 1 root root 232080 22 gen 14:15 ip_queue.ko
If I look under my previously installed kernel I can see (
/lib/modules/2.6.14-1.1656_FC4/kernel/net/ipv4/netfilter):
-rwxr--r-- 1 root root 7032 6 gen 04:37 arptable_filter.ko
-rwxr--r-- 1 root root 23680 6 gen 04:37 arp_tables.ko
-rwxr--r-- 1 root root 6000 6 gen 04:37 arpt_mangle.ko
-rwxr--r-- 1 root root 10096 6 gen 04:37 ip_conntrack_amanda.ko
-rwxr--r-- 1 root root 13816 6 gen 04:37 ip_conntrack_ftp.ko
-rwxr--r-- 1 root root 12656 6 gen 04:37 ip_conntrack_irc.ko
-rwxr--r-- 1 root root 93392 6 gen 04:37 ip_conntrack.ko
-rwxr--r-- 1 root root 6760 6 gen 04:37 ip_conntrack_netbios_ns.ko
-rwxr--r-- 1 root root 39808 6 gen 04:37 ip_conntrack_netlink.ko
-rwxr--r-- 1 root root 21152 6 gen 04:37 ip_conntrack_pptp.ko
-rwxr--r-- 1 root root 16840 6 gen 04:37 ip_conntrack_proto_sctp.ko
-rwxr--r-- 1 root root 8832 6 gen 04:37 ip_conntrack_tftp.ko
-rwxr--r-- 1 root root 5744 6 gen 04:37 ip_nat_amanda.ko
-rwxr--r-- 1 root root 7864 6 gen 04:37 ip_nat_ftp.ko
-rwxr--r-- 1 root root 6448 6 gen 04:37 ip_nat_irc.ko
-rwxr--r-- 1 root root 31960 6 gen 04:37 ip_nat.ko
-rwxr--r-- 1 root root 13216 6 gen 04:37 ip_nat_pptp.ko
-rwxr--r-- 1 root root 19112 6 gen 04:37 ip_nat_snmp_basic.ko
-rwxr--r-- 1 root root 4992 6 gen 04:37 ip_nat_tftp.ko
-rwxr--r-- 1 root root 21032 6 gen 04:37 ip_queue.ko
-rwxr--r-- 1 root root 8536 6 gen 04:37 iptable_filter.ko
-rwxr--r-- 1 root root 8432 6 gen 04:37 iptable_mangle.ko
-rwxr--r-- 1 root root 16048 6 gen 04:37 iptable_nat.ko
-rwxr--r-- 1 root root 6288 6 gen 04:37 iptable_raw.ko
-rwxr--r-- 1 root root 37424 6 gen 04:37 ip_tables.ko
-rwxr--r-- 1 root root 5392 6 gen 04:37 ipt_addrtype.ko
-rwxr--r-- 1 root root 5112 6 gen 04:37 ipt_ah.ko
-rwxr--r-- 1 root root 5592 6 gen 04:37 ipt_CLASSIFY.ko
-rwxr--r-- 1 root root 16288 6 gen 04:37 ipt_CLUSTERIP.ko
-rwxr--r-- 1 root root 4736 6 gen 04:37 ipt_comment.ko
-rwxr--r-- 1 root root 5280 6 gen 04:37 ipt_connbytes.ko
-rwxr--r-- 1 root root 5232 6 gen 04:37 ipt_connmark.ko
-rwxr--r-- 1 root root 5720 6 gen 04:37 ipt_CONNMARK.ko
-rwxr--r-- 1 root root 5856 6 gen 04:37 ipt_conntrack.ko
-rwxr--r-- 1 root root 7040 6 gen 04:37 ipt_dccp.ko
-rwxr--r-- 1 root root 4728 6 gen 04:37 ipt_dscp.ko
-rwxr--r-- 1 root root 6040 6 gen 04:37 ipt_DSCP.ko
-rwxr--r-- 1 root root 5632 6 gen 04:37 ipt_ecn.ko
-rwxr--r-- 1 root root 7016 6 gen 04:37 ipt_ECN.ko
-rwxr--r-- 1 root root 5112 6 gen 04:37 ipt_esp.ko
-rwxr--r-- 1 root root 17056 6 gen 04:37 ipt_hashlimit.ko
-rwxr--r-- 1 root root 5656 6 gen 04:37 ipt_helper.ko
-rwxr--r-- 1 root root 4864 6 gen 04:37 ipt_iprange.ko
-rwxr--r-- 1 root root 4728 6 gen 04:37 ipt_length.ko
-rwxr--r-- 1 root root 6056 6 gen 04:37 ipt_limit.ko
-rwxr--r-- 1 root root 15800 6 gen 04:37 ipt_LOG.ko
-rwxr--r-- 1 root root 5216 6 gen 04:37 ipt_mac.ko
-rwxr--r-- 1 root root 5088 6 gen 04:37 ipt_mark.ko
-rwxr--r-- 1 root root 6592 6 gen 04:37 ipt_MARK.ko
-rwxr--r-- 1 root root 8008 6 gen 04:37 ipt_MASQUERADE.ko
-rwxr--r-- 1 root root 6144 6 gen 04:37 ipt_multiport.ko
-rwxr--r-- 1 root root 5232 6 gen 04:37 ipt_NETMAP.ko
-rwxr--r-- 1 root root 5224 6 gen 04:37 ipt_NFQUEUE.ko
-rwxr--r-- 1 root root 5424 6 gen 04:37 ipt_NOTRACK.ko
-rwxr--r-- 1 root root 5576 6 gen 04:37 ipt_owner.ko
-rwxr--r-- 1 root root 5264 6 gen 04:37 ipt_physdev.ko
-rwxr--r-- 1 root root 4736 6 gen 04:37 ipt_pkttype.ko
-rwxr--r-- 1 root root 5208 6 gen 04:37 ipt_realm.ko
-rwxr--r-- 1 root root 20632 6 gen 04:37 ipt_recent.ko
-rwxr--r-- 1 root root 5256 6 gen 04:37 ipt_REDIRECT.ko
-rwxr--r-- 1 root root 11064 6 gen 04:37 ipt_REJECT.ko
-rwxr--r-- 1 root root 5840 6 gen 04:37 ipt_SAME.ko
-rwxr--r-- 1 root root 5920 6 gen 04:37 ipt_sctp.ko
-rwxr--r-- 1 root root 5168 6 gen 04:37 ipt_state.ko
-rwxr--r-- 1 root root 5496 6 gen 04:37 ipt_string.ko
-rwxr--r-- 1 root root 5768 6 gen 04:37 ipt_tcpmss.ko
-rwxr--r-- 1 root root 8248 6 gen 04:37 ipt_TCPMSS.ko
-rwxr--r-- 1 root root 4552 6 gen 04:37 ipt_tos.ko
-rwxr--r-- 1 root root 6040 6 gen 04:37 ipt_TOS.ko
-rwxr--r-- 1 root root 5208 6 gen 04:37 ipt_ttl.ko
-rwxr--r-- 1 root root 6048 6 gen 04:37 ipt_TTL.ko
-rwxr--r-- 1 root root 14120 6 gen 04:37 ipt_ULOG.ko
What I'm missing when I try to compile 2.6.16 kernel ?
TY
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: ipsec01-02-03-04 installation problem
@ 2006-01-22 12:57 ` webmaster @ elnportal.it
0 siblings, 0 replies; 8+ messages in thread
From: webmaster @ elnportal.it @ 2006-01-22 12:57 UTC (permalink / raw)
To: Marco Berizzi, netfilter-devel; +Cc: netfilter
Here the passages followed for installing iptables with SNAT support through
ipsec tunnel:
1_ Downloaded from kernel.org 2.6.16-rc1.tar.bz2 kernel
2_ untarred it to /usr/src
3_ make mrproper
4_ copy an old .config file from 2.6.14 sources (Fedora Core 4)
5_ ln -s linux-2.6.16-rc1/ linux
6_ make oldconfig (hitting enter on all query)
7_ make menuconfig
8_ XFRM [IPSec] Networking Security Hooks
9_ Exit and save kernel configuration
10_ make all
11_ make modules_install
12_ make install
13_ reboot
14_ rpm -e --nodep iptables
15_ untar tarball (snapshot of iptables)
16_ make (under src directory of iptables)
17_ make install
18_ iptables -L
iptables v1.3.4-20060121: can't initialize iptables table `filter': iptables
who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Seeking for modules under /lib/modules/2.6.16-rc1/kernel/net/ipv4/netfilter
I could see only
-rw-r--r-- 1 root root 196238 22 gen 14:15 ip_conntrack_amanda.ko
-rw-r--r-- 1 root root 227391 22 gen 14:15 ip_conntrack_ftp.ko
-rw-r--r-- 1 root root 208996 22 gen 14:15 ip_conntrack_irc.ko
-rw-r--r-- 1 root root 1136548 22 gen 14:15 ip_conntrack.ko
-rw-r--r-- 1 root root 167689 22 gen 14:15 ip_conntrack_netbios_ns.ko
-rw-r--r-- 1 root root 295709 22 gen 14:15 ip_conntrack_netlink.ko
-rw-r--r-- 1 root root 340536 22 gen 14:15 ip_conntrack_pptp.ko
-rw-r--r-- 1 root root 171796 22 gen 14:15 ip_conntrack_proto_sctp.ko
-rw-r--r-- 1 root root 193359 22 gen 14:15 ip_conntrack_tftp.ko
-rw-r--r-- 1 root root 232080 22 gen 14:15 ip_queue.ko
If I look under my previously installed kernel I can see (
/lib/modules/2.6.14-1.1656_FC4/kernel/net/ipv4/netfilter):
-rwxr--r-- 1 root root 7032 6 gen 04:37 arptable_filter.ko
-rwxr--r-- 1 root root 23680 6 gen 04:37 arp_tables.ko
-rwxr--r-- 1 root root 6000 6 gen 04:37 arpt_mangle.ko
-rwxr--r-- 1 root root 10096 6 gen 04:37 ip_conntrack_amanda.ko
-rwxr--r-- 1 root root 13816 6 gen 04:37 ip_conntrack_ftp.ko
-rwxr--r-- 1 root root 12656 6 gen 04:37 ip_conntrack_irc.ko
-rwxr--r-- 1 root root 93392 6 gen 04:37 ip_conntrack.ko
-rwxr--r-- 1 root root 6760 6 gen 04:37 ip_conntrack_netbios_ns.ko
-rwxr--r-- 1 root root 39808 6 gen 04:37 ip_conntrack_netlink.ko
-rwxr--r-- 1 root root 21152 6 gen 04:37 ip_conntrack_pptp.ko
-rwxr--r-- 1 root root 16840 6 gen 04:37 ip_conntrack_proto_sctp.ko
-rwxr--r-- 1 root root 8832 6 gen 04:37 ip_conntrack_tftp.ko
-rwxr--r-- 1 root root 5744 6 gen 04:37 ip_nat_amanda.ko
-rwxr--r-- 1 root root 7864 6 gen 04:37 ip_nat_ftp.ko
-rwxr--r-- 1 root root 6448 6 gen 04:37 ip_nat_irc.ko
-rwxr--r-- 1 root root 31960 6 gen 04:37 ip_nat.ko
-rwxr--r-- 1 root root 13216 6 gen 04:37 ip_nat_pptp.ko
-rwxr--r-- 1 root root 19112 6 gen 04:37 ip_nat_snmp_basic.ko
-rwxr--r-- 1 root root 4992 6 gen 04:37 ip_nat_tftp.ko
-rwxr--r-- 1 root root 21032 6 gen 04:37 ip_queue.ko
-rwxr--r-- 1 root root 8536 6 gen 04:37 iptable_filter.ko
-rwxr--r-- 1 root root 8432 6 gen 04:37 iptable_mangle.ko
-rwxr--r-- 1 root root 16048 6 gen 04:37 iptable_nat.ko
-rwxr--r-- 1 root root 6288 6 gen 04:37 iptable_raw.ko
-rwxr--r-- 1 root root 37424 6 gen 04:37 ip_tables.ko
-rwxr--r-- 1 root root 5392 6 gen 04:37 ipt_addrtype.ko
-rwxr--r-- 1 root root 5112 6 gen 04:37 ipt_ah.ko
-rwxr--r-- 1 root root 5592 6 gen 04:37 ipt_CLASSIFY.ko
-rwxr--r-- 1 root root 16288 6 gen 04:37 ipt_CLUSTERIP.ko
-rwxr--r-- 1 root root 4736 6 gen 04:37 ipt_comment.ko
-rwxr--r-- 1 root root 5280 6 gen 04:37 ipt_connbytes.ko
-rwxr--r-- 1 root root 5232 6 gen 04:37 ipt_connmark.ko
-rwxr--r-- 1 root root 5720 6 gen 04:37 ipt_CONNMARK.ko
-rwxr--r-- 1 root root 5856 6 gen 04:37 ipt_conntrack.ko
-rwxr--r-- 1 root root 7040 6 gen 04:37 ipt_dccp.ko
-rwxr--r-- 1 root root 4728 6 gen 04:37 ipt_dscp.ko
-rwxr--r-- 1 root root 6040 6 gen 04:37 ipt_DSCP.ko
-rwxr--r-- 1 root root 5632 6 gen 04:37 ipt_ecn.ko
-rwxr--r-- 1 root root 7016 6 gen 04:37 ipt_ECN.ko
-rwxr--r-- 1 root root 5112 6 gen 04:37 ipt_esp.ko
-rwxr--r-- 1 root root 17056 6 gen 04:37 ipt_hashlimit.ko
-rwxr--r-- 1 root root 5656 6 gen 04:37 ipt_helper.ko
-rwxr--r-- 1 root root 4864 6 gen 04:37 ipt_iprange.ko
-rwxr--r-- 1 root root 4728 6 gen 04:37 ipt_length.ko
-rwxr--r-- 1 root root 6056 6 gen 04:37 ipt_limit.ko
-rwxr--r-- 1 root root 15800 6 gen 04:37 ipt_LOG.ko
-rwxr--r-- 1 root root 5216 6 gen 04:37 ipt_mac.ko
-rwxr--r-- 1 root root 5088 6 gen 04:37 ipt_mark.ko
-rwxr--r-- 1 root root 6592 6 gen 04:37 ipt_MARK.ko
-rwxr--r-- 1 root root 8008 6 gen 04:37 ipt_MASQUERADE.ko
-rwxr--r-- 1 root root 6144 6 gen 04:37 ipt_multiport.ko
-rwxr--r-- 1 root root 5232 6 gen 04:37 ipt_NETMAP.ko
-rwxr--r-- 1 root root 5224 6 gen 04:37 ipt_NFQUEUE.ko
-rwxr--r-- 1 root root 5424 6 gen 04:37 ipt_NOTRACK.ko
-rwxr--r-- 1 root root 5576 6 gen 04:37 ipt_owner.ko
-rwxr--r-- 1 root root 5264 6 gen 04:37 ipt_physdev.ko
-rwxr--r-- 1 root root 4736 6 gen 04:37 ipt_pkttype.ko
-rwxr--r-- 1 root root 5208 6 gen 04:37 ipt_realm.ko
-rwxr--r-- 1 root root 20632 6 gen 04:37 ipt_recent.ko
-rwxr--r-- 1 root root 5256 6 gen 04:37 ipt_REDIRECT.ko
-rwxr--r-- 1 root root 11064 6 gen 04:37 ipt_REJECT.ko
-rwxr--r-- 1 root root 5840 6 gen 04:37 ipt_SAME.ko
-rwxr--r-- 1 root root 5920 6 gen 04:37 ipt_sctp.ko
-rwxr--r-- 1 root root 5168 6 gen 04:37 ipt_state.ko
-rwxr--r-- 1 root root 5496 6 gen 04:37 ipt_string.ko
-rwxr--r-- 1 root root 5768 6 gen 04:37 ipt_tcpmss.ko
-rwxr--r-- 1 root root 8248 6 gen 04:37 ipt_TCPMSS.ko
-rwxr--r-- 1 root root 4552 6 gen 04:37 ipt_tos.ko
-rwxr--r-- 1 root root 6040 6 gen 04:37 ipt_TOS.ko
-rwxr--r-- 1 root root 5208 6 gen 04:37 ipt_ttl.ko
-rwxr--r-- 1 root root 6048 6 gen 04:37 ipt_TTL.ko
-rwxr--r-- 1 root root 14120 6 gen 04:37 ipt_ULOG.ko
What I'm missing when I try to compile 2.6.16 kernel ?
TY
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: ipsec01-02-03-04 installation problem
2006-01-22 12:57 ` webmaster @ elnportal.it
(?)
@ 2006-01-24 1:29 ` Yasuyuki KOZAKAI
-1 siblings, 0 replies; 8+ messages in thread
From: Yasuyuki KOZAKAI @ 2006-01-24 1:29 UTC (permalink / raw)
To: webmaster; +Cc: netfilter-devel, netfilter, pupilla
Hi,
You may already resolve this, but anyway,
From: "webmaster @ elnportal.it" <webmaster@elnportal.it>
Date: Sun, 22 Jan 2006 13:57:29 +0100
> Here the passages followed for installing iptables with SNAT support through
> ipsec tunnel:
>
> 1_ Downloaded from kernel.org 2.6.16-rc1.tar.bz2 kernel
> 2_ untarred it to /usr/src
> 3_ make mrproper
> 4_ copy an old .config file from 2.6.14 sources (Fedora Core 4)
> 5_ ln -s linux-2.6.16-rc1/ linux
> 6_ make oldconfig (hitting enter on all query)
> 7_ make menuconfig
> 8_ XFRM [IPSec] Networking Security Hooks
I think you need to re-configure netfilter related items.
Please go to the menu "Network packet filtering (replaces ipchains)",
enable "Netfilter Xtables support (required for ip_tables)",
and enable matches/targets you want use. You may also need to re-configure
"IP: Netfilter Configuration" and "IPv6: Netfilter Configuration"
if you want to use them.
> 9_ Exit and save kernel configuration
> 10_ make all
> 11_ make modules_install
> 12_ make install
> 13_ reboot
>
> 14_ rpm -e --nodep iptables
> 15_ untar tarball (snapshot of iptables)
> 16_ make (under src directory of iptables)
> 17_ make install
> 18_ iptables -L
>
> iptables v1.3.4-20060121: can't initialize iptables table `filter': iptables
> who? (do you need to insmod?)
> Perhaps iptables or your kernel needs to be upgraded.
Regards,
-- Yasuyuki Kozakai
^ permalink raw reply [flat|nested] 8+ messages in thread
[parent not found: <BAY103-F14C083B182E5CD80A0A34FB21F0@phx.gbl>]
end of thread, other threads:[~2006-01-24 1:29 UTC | newest]
Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-01-18 23:19 ipsec01-02-03-04 installation problem webmaster @ elnportal.it
2006-01-19 8:52 ` Marco Berizzi
2006-01-19 18:05 ` webmaster @ elnportal.it
2006-01-19 18:19 ` Marco Berizzi
2006-01-22 12:57 ` webmaster @ elnportal.it
2006-01-22 12:57 ` webmaster @ elnportal.it
2006-01-24 1:29 ` Yasuyuki KOZAKAI
[not found] <BAY103-F14C083B182E5CD80A0A34FB21F0@phx.gbl>
2006-01-22 11:21 ` webmaster @ elnportal.it
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.