iptables 1.2.11

iptables 1.2.11

[Paulo Andre]

If I build the above package will it include PPTP and GRE Conntrack module?

Paulo

RE: iptables 1.2.11

[Rob Sterenborg]

> Subject: iptables 1.2.11
> 
> If I build the above package will it include PPTP and GRE 
> Conntrack module?

Only if you patched the kernel with patch-o-matic to support it.


Gr,
Rob

Re: iptables 1.2.11

[Paulo Andre]

On 20/08/2004 14:38, Rob Sterenborg wrote:
> > Subject: iptables 1.2.11
> >
> > If I build the above package will it include PPTP and GRE
> > Conntrack module?
>
> Only if you patched the kernel with patch-o-matic to support it.

I have patch the kernel with patch-o-matic-ng-20040621.tar.bz2 and when I run 
it I dont get prompted for the PPTP/GRE stuff

Any ideas.

Paulo

RE: iptables 1.2.11

[Rob Sterenborg]

> I have patch the kernel with 
> patch-o-matic-ng-20040621.tar.bz2 and when I run it I dont 
> get prompted for the PPTP/GRE stuff

Which kernel version ? 2.6.x ?
Last time I checked there was no PPTP patch for 2.6 kernels (but this
could be outdated information).


Gr,
Rob

Re: iptables 1.2.11

[Paulo Andre]

On 20/08/2004 16:21, Rob Sterenborg wrote:
> > I have patch the kernel with
> > patch-o-matic-ng-20040621.tar.bz2 and when I run it I dont
> > get prompted for the PPTP/GRE stuff
>
> Which kernel version ? 2.6.x ?
> Last time I checked there was no PPTP patch for 2.6 kernels (but this
> could be outdated information).

I am currently using 2.6.4, do you mean to say that 2.6 can not do PPTP/GRE
Conntrack?

Paulo

RE: iptables 1.2.11

[Rob Sterenborg]

> > Which kernel version ? 2.6.x ?
> > Last time I checked there was no PPTP patch for 2.6 kernels 
> (but this 
> > could be outdated information).
> 
> I am currently using 2.6.4, do you mean to say that 2.6 can 
> not do PPTP/GRE Conntrack?

If my information is still current : yes. Until there is a POM patch.


Gr,
Rob

RE: iptables 1.2.11

[Rob Sterenborg]

> > Which kernel version ? 2.6.x ?
> > Last time I checked there was no PPTP patch for 2.6 kernels
> (but this
> > could be outdated information).
> 
> I am currently using 2.6.4, do you mean to say that 2.6 can not do 
> PPTP/GRE Conntrack?

If my information is still current : yes. Until there is a POM patch.


Gr,
Rob

iptables 1.2.11

[Paulo Andre]

I have just installed a new kernel (2.4.27).
I patched the kernel to handle pptp/gre conntrack.
I also installed iptables 1.2.11 on this server, after the kernel build I 
installed iptables and that went through fine.

When I restart the server the new kernel works great, but iptables gives me an 
error of 'iptables: Invalid argument' for any -t nat rules.
Have I missed an option on the kernel rebuild?

Paulo

Re: iptables 1.2.11

[Paulo Andre]

On 28/08/2004 10:38, Paulo Andre wrote:
> I have just installed a new kernel (2.4.27).
> I patched the kernel to handle pptp/gre conntrack.
> I also installed iptables 1.2.11 on this server, after the kernel build I
> installed iptables and that went through fine.
>
> When I restart the server the new kernel works great, but iptables gives me
> an error of 'iptables: Invalid argument' for any -t nat rules.
> Have I missed an option on the kernel rebuild?
>
> Paulo

To add to this, I have then rebooted the server and gone back to the old 
kernel and still I have problems with the iptables when trying to add '-t 
nat' rules.

Paulo

Re: iptables 1.2.11

[Jose Maria Lopez]

El sáb, 28 de 08 de 2004 a las 10:44, Paulo Andre escribió:
> On 28/08/2004 10:38, Paulo Andre wrote:
> > I have just installed a new kernel (2.4.27).
> > I patched the kernel to handle pptp/gre conntrack.
> > I also installed iptables 1.2.11 on this server, after the kernel build I
> > installed iptables and that went through fine.
> >
> > When I restart the server the new kernel works great, but iptables gives me
> > an error of 'iptables: Invalid argument' for any -t nat rules.
> > Have I missed an option on the kernel rebuild?
> >
> > Paulo
> 
> To add to this, I have then rebooted the server and gone back to the old 
> kernel and still I have problems with the iptables when trying to add '-t 
> nat' rules.
> 
> Paulo

You have to patch with patch-o-matic ng the kernel and the userspace
(iptables) source code and then compile them. Both need to have the
same code patched, if one of them has code different from the other
(another patch-o-matic patch) then you will have problems.


-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"