ipfwadm problems

ipfwadm problems

[Kirk]

I'm trying to issue an "ipfwadm" to create ipchains and am getting:

> Generic IP Firewall Chains not in this kernel

Looking for help with re-compiling the 2.4.18-2 (latest from CD's 7.3
install).  Can someone point me in the right direction?

Thanks

Off topic: Solaris 9 announced, a lot of Linux incorporated

[Aschwin Marsman - aYniK Software Solutions]

Today SUN announced the availability of Solaris 9. It has a lot
Linux compatibility features: ;-)

>From the announcement:

In today's world of heterogeneous computing, compatibility leads 
to efficiency. Combining the Linux community with thousands of 
Solaris software developers and nearly three million Java and XML 
software developers, Sun provides customers with unified access to 
the broadest array of innovation in the industry on which to provide 
services. In the Solaris 9 Operating Environment, more Linux applications, 
tools, and APIs are made available.

API Compatibility

Common libraries and build environments, such as libxml, glib, and GTK+, 
are integrated in the Solaris Operating Environment to streamline source 
code development across Linux and Solaris environments.

Application Compatibility

Common Linux applications, such as Samba, Apache, Linux (GNU) commands, 
etc., are included in the Solaris 9 Operating Environment. The Solaris 
Software Companion CD has an even more comprehensive set of free software.
     
On my web site I posted a little article about Solaris 9:
http://www.aynik.com/articles/20020522.1.php
 
Kind regards,
 
Aschwin Marsman
 
--
aYniK Software Solutions         all You need is Knowledge
Bedrijvenpark Twente 305         NL-7602 KL Almelo - the Netherlands
P.O. box 134                     NL-7600 AC Almelo - the Netherlands
telephone: +31 (0)546-581400     fax: +31 (0)546-581401
a.marsman@aYniK.com              http://www.aYniK.com
aschwin@marsman.org              http://www.marsman.org
webmaster@onlinefotoservices.nl  http://wwww.onlinefotoservices.nl

Re: Off topic: Solaris 9 announced, a lot of Linux incorporated

[Sergey Kubushin]

On Wed, 22 May 2002, Aschwin Marsman - aYniK Software Solutions wrote:

> Today SUN announced the availability of Solaris 9. It has a lot
> Linux compatibility features: ;-)

It won't save them, their train's already gone...

---
Sergey Kubushin				Sr. Unix Administrator
Metavante, Inc.				Phone:	702-567-8857
874 American Pacific Dr,		Fax:	702-567-8808
Henderson, NV 89014

Re: Off topic: Solaris 9 announced, a lot of Linux incorporated

[Alexander Viro]

On Wed, 22 May 2002, Aschwin Marsman - aYniK Software Solutions wrote:

> In today's world of heterogeneous computing, compatibility leads 
> to efficiency. Combining the Linux community with thousands of 
> Solaris software developers and nearly three million Java and XML 
> software developers...

Homeopathic approach to software development?

Re: Off topic: Solaris 9 announced, a lot of Linux incorporated

[Sergey Kubushin]

On Wed, 22 May 2002, Alexander Viro wrote:

>
>
> On Wed, 22 May 2002, Aschwin Marsman - aYniK Software Solutions wrote:
>
> > In today's world of heterogeneous computing, compatibility leads
> > to efficiency. Combining the Linux community with thousands of
> > Solaris software developers and nearly three million Java and XML
> > software developers...
>
> Homeopathic approach to software development?

An attempt to catch the leaving train...

---
Sergey Kubushin				Sr. Unix Administrator
Metavante, Inc.				Phone:	702-567-8857
874 American Pacific Dr,		Fax:	702-567-8808
Henderson, NV 89014

Re: ipfwadm problems

[Kirk]

Does iptables have or allow IP Masqurading?  This is really what I'm trying
to do as I have a network behind my linux server (acting as a router) and
need to forward packets from 192.168.0.x to my WAN port on the same Linux
server.  I had this working with ipchains until the upgrade to 2.4.18.

Thanks,
Kirk


----- Original Message -----
From: "Ambrish Verma" <averma@marantinetworks.com>
To: <kirk@scriptdoggie.com>
Sent: Wednesday, May 22, 2002 12:15 PM
Subject: Re: ipfwadm problems


In the new kernels ipchains is not included by default (probably if you put
some effort you can include it.).
There is an alternate for ipchains is available called iptables, with which
you should be able to do most of the things you expect from ipchains.

--
Ambrish


"Kirk" <kirk@scriptdoggie.com> wrote in message
news:011101c201bd$91ccccc0$320e10ac@irvine.hnc.com...
> I'm trying to issue an "ipfwadm" to create ipchains and am getting:
>
> > Generic IP Firewall Chains not in this kernel
>
> Looking for help with re-compiling the 2.4.18-2 (latest from CD's 7.3
> install).  Can someone point me in the right direction?
>
> Thanks
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/

Re: ipfwadm problems

[Paul Clements]

There should still be ipchains support in 2.4.18, maybe not by default, but
I've got it in my 2.4.18 kernel. You may need to "insmod ipchains", which may
also require "rmmod iptables" first, depending upon how the kernel is being
setup at boot time. At any rate, iptables certainly has all the capabilities
of ipchains plus a lot more (that's why it's so complicated, and why I don't
use it... :). I don't know if "ipfwadm" will still work (that's old 2.0 kernel
stuff), but the ipchains command definitely works on 2.4.18:

titan:/usr/src/linux-2.4.18.PRISTINE# ls -l net/ipv4/netfilter/ipchains_core.c 
-rw-r--r--    1 root     root        50368 Apr 29 10:44 net/ipv4/netfilter/ipchains_core.c

titan:/usr/src/linux-2.4.18.PRISTINE# ipchains -L -n
Chain input (policy ACCEPT):
target     prot opt     source                destination           ports
ACCEPT     udp  ------  172.17.4.1           0.0.0.0/0             53 ->   1025:65535
ACCEPT     udp  ------  172.17.4.7           0.0.0.0/0             53 ->   1025:65535
icmp       icmp ------  0.0.0.0/0            0.0.0.0/0             * ->   *
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):
Chain icmp (1 references):
target     prot opt     source                destination           ports
ACCEPT     all  ------  0.0.0.0/0            0.0.0.0/0             n/a

titan:/usr/src/linux-2.4.18.PRISTINE# uname -r
2.4.18


Hope that helps.

-- 
Paul Clements
SteelEye Technology
Paul.Clements@SteelEye.com



On Wed, 22 May 2002, Kirk wrote:

> Does iptables have or allow IP Masqurading?  This is really what I'm trying
> to do as I have a network behind my linux server (acting as a router) and
> need to forward packets from 192.168.0.x to my WAN port on the same Linux
> server.  I had this working with ipchains until the upgrade to 2.4.18.
> 
> Thanks,
> Kirk
> 
> 
> ----- Original Message -----
> From: "Ambrish Verma" <averma@marantinetworks.com>
> To: <kirk@scriptdoggie.com>
> Sent: Wednesday, May 22, 2002 12:15 PM
> Subject: Re: ipfwadm problems
> 
> 
> In the new kernels ipchains is not included by default (probably if you put
> some effort you can include it.).
> There is an alternate for ipchains is available called iptables, with which
> you should be able to do most of the things you expect from ipchains.
> 
> --
> Ambrish
> 
> 
> "Kirk" <kirk@scriptdoggie.com> wrote in message
> news:011101c201bd$91ccccc0$320e10ac@irvine.hnc.com...
> > I'm trying to issue an "ipfwadm" to create ipchains and am getting:
> >
> > > Generic IP Firewall Chains not in this kernel
> >
> > Looking for help with re-compiling the 2.4.18-2 (latest from CD's 7.3
> > install).  Can someone point me in the right direction?
> >
> > Thanks
> >
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> > the body of a message to majordomo@vger.kernel.org
> > More majordomo info at  http://vger.kernel.org/majordomo-info.html
> > Please read the FAQ at  http://www.tux.org/lkml/
> 
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
> 

Re: ipfwadm problems

[Frank Schaefer]

On Wed, 2002-05-22 at 21:51, Kirk wrote:
> Does iptables have or allow IP Masqurading?  This is really what I'm trying
> to do as I have a network behind my linux server (acting as a router) and
> need to forward packets from 192.168.0.x to my WAN port on the same Linux
> server.  I had this working with ipchains until the upgrade to 2.4.18.
> 

Yes, You have to use the SNAT/DNAT targets in the PREROUTING/POSTROUTING
chains of the NAT table. Recognize, that IP Masquerade is nothing else
than a subset of Network Adress Translation (NAT).

Regards
Frank

BTW: A collegue of mine has the problem, that a host has 4 NICs; 2 to
the LAN and 2 to the internet. Packets coming from LAN NIC 1 shall be
forwarded through WWW NIC 1 and Packets from LAN NIC 2 through WWW NIC
2. Is there any way to perform this on a 2.2.x kernel using ipchains?
And even whorse; They need destination NAT in the reverse manner of the
above.

Re: ipfwadm problems

[Petr Titera]

Frank Schaefer wrote:

> 
> BTW: A collegue of mine has the problem, that a host has 4 NICs; 2 to
> the LAN and 2 to the internet. Packets coming from LAN NIC 1 shall be
> forwarded through WWW NIC 1 and Packets from LAN NIC 2 through WWW NIC
> 2. Is there any way to perform this on a 2.2.x kernel using ipchains?

It can be done with advanced routing (look at www.lartc.org). You can 
specify different routing tables for each interface.

> And even whorse; They need destination NAT in the reverse manner of the
> above.
> 

With ipchains it can be tricky with iptables it is a piece of cake :)

Petr Titera
P.Titera@century.cz


> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
>