Iptables modules

Iptables modules

[Alejandro Cabrera Obed]

[-- Attachment #1: Type: text/plain, Size: 380 bytes --]

Hi everybody, I'm new at this list and I'm not an expert. I use a Red Hat 9 Linux. 
So I need to know how I can view in my Linux OS the modules the kernel has or load at boot time, for example for implement  FTP connection tracks or TOS.

Another question: where can I get the modules I don't have now ??? And what can I install them ???

Thanks a lot, regards.

Alejandro.

[-- Attachment #2: Type: text/html, Size: 1023 bytes --]

Iptables Modules

[Ali Ozaltin]

Hello,

When I use "lsmod" command i can see three enables module for iptables. How
can I enable other modules ? Can you pls help ? 

ip_tables              17669  3 iptable_nat,iptable_mangle,iptable_filter

Thank you for your helps

Re: Iptables Modules

[Rob Sterenborg]

On Mon, December 11, 2006 13:01, Ali Ozaltin wrote:
>
> Hello,
>
>
> When I use "lsmod" command i can see three enables module for iptables. How
> can I enable other modules ? Can you pls help ?
>
> ip_tables  17669� 3 iptable_nat,iptable_mangle,iptable_filter

iptables -A ... -p <proto> ...

or

iptables -A ... -m <module> ...

(See: man iptables)

or

modprobe <iptables_module>

(See: man modprobe)

You can find the netfilter modules that you have installed in:

/lib/modules/`uname -r`/kernel/net/ipv4/netfilter


Grts,
Rob

Re: Iptables Modules

[Gáspár Lajos]

Ali Ozaltin írta:
> Hello,
>
> When I use "lsmod" command i can see three enables module for iptables. How
> can I enable other modules ? Can you pls help ? 
>
> ip_tables              17669  3 iptable_nat,iptable_mangle,iptable_filter
>
> Thank you for your helps
>
>   
First:
 Try simply using them...
 If autoloading enabled in your kernel then they will be loaded when 
needed...
Second:
 Use modprobe command.

Swifty

RE: Iptables Modules

[Ali Ozaltin]

How can i check autoloading ? 

-----Original Message-----
From: Gáspár Lajos [mailto:swifty@freemail.hu] 
Sent: Monday, December 11, 2006 2:17 PM
To: Ali Ozaltin
Cc: netfilter@lists.netfilter.org
Subject: Re: Iptables Modules


Ali Ozaltin írta:
> Hello,
>
> When I use "lsmod" command i can see three enables module for iptables.
How
> can I enable other modules ? Can you pls help ? 
>
> ip_tables              17669  3 iptable_nat,iptable_mangle,iptable_filter
>
> Thank you for your helps
>
>   
First:
 Try simply using them...
 If autoloading enabled in your kernel then they will be loaded when 
needed...
Second:
 Use modprobe command.

Swifty

RE: Iptables Modules

[Ali Ozaltin]

Rob,

[root@websrv1 log]# ls
/lib/modules/2.6.18-1.2798.fc6xen/kernel/net/ipv4/netfilter
arptable_filter.ko          ip_conntrack_proto_sctp.ko  ip_nat_tftp.ko
ipt_DSCP.ko        ipt_REJECT.ko
arp_tables.ko               ip_conntrack_sip.ko         ip_queue.ko
ipt_ecn.ko         ipt_SAME.ko
arpt_mangle.ko              ip_conntrack_tftp.ko        iptable_filter.ko
ipt_ECN.ko         ipt_TCPMSS.ko
ip_conntrack_amanda.ko      ip_nat_amanda.ko            iptable_mangle.ko
ipt_hashlimit.ko   ipt_tos.ko
ip_conntrack_ftp.ko         ip_nat_ftp.ko               iptable_nat.ko
ipt_iprange.ko     ipt_TOS.ko
ip_conntrack_h323.ko        ip_nat_h323.ko              iptable_raw.ko
ipt_LOG.ko         ipt_ttl.ko
ip_conntrack_irc.ko         ip_nat_irc.ko               ip_tables.ko
ipt_MASQUERADE.ko  ipt_TTL.ko
ip_conntrack.ko             ip_nat.ko                   ipt_addrtype.ko
ipt_NETMAP.ko      ipt_ULOG.ko
ip_conntrack_netbios_ns.ko  ip_nat_pptp.ko              ipt_ah.ko
ipt_owner.ko
ip_conntrack_netlink.ko     ip_nat_sip.ko               ipt_CLUSTERIP.ko
ipt_recent.ko
ip_conntrack_pptp.ko        ip_nat_snmp_basic.ko        ipt_dscp.ko
ipt_REDIRECT.ko
[root@websrv1 log]# modprobe ipt_hashlimit.ko
FATAL: Module ipt_hashlimit.ko not found.
[root@websrv1 log]# modprobe ipt_iprange.ko
FATAL: Module ipt_iprange.ko not found.
[root@websrv1 log]#




I cant start modprobe can you pls advise ?

-----Original Message-----
From: netfilter-bounces@lists.netfilter.org
[mailto:netfilter-bounces@lists.netfilter.org] On Behalf Of Rob Sterenborg
Sent: Monday, December 11, 2006 2:14 PM
To: netfilter@lists.netfilter.org
Subject: Re: Iptables Modules

On Mon, December 11, 2006 13:01, Ali Ozaltin wrote:
>
> Hello,
>
>
> When I use "lsmod" command i can see three enables module for iptables.
How
> can I enable other modules ? Can you pls help ?
>
> ip_tables  17669� 3 iptable_nat,iptable_mangle,iptable_filter

iptables -A ... -p <proto> ...

or

iptables -A ... -m <module> ...

(See: man iptables)

or

modprobe <iptables_module>

(See: man modprobe)

You can find the netfilter modules that you have installed in:

/lib/modules/`uname -r`/kernel/net/ipv4/netfilter


Grts,
Rob

RE: Iptables Modules

[Rob Sterenborg]

On Mon, December 11, 2006 13:38, Ali Ozaltin wrote:
> Rob,
>
> [root@websrv1 log]# ls
> /lib/modules/2.6.18-1.2798.fc6xen/kernel/net/ipv4/netfilter
> arptable_filter.ko ip_conntrack_proto_sctp.ko  ip_nat_tftp.ko

[....]

> ipt_dscp.ko ipt_REDIRECT.ko
> [root@websrv1 log]# modprobe ipt_hashlimit.ko
> FATAL: Module ipt_hashlimit.ko not found.
> [root@websrv1 log]# modprobe ipt_iprange.ko
> FATAL: Module ipt_iprange.ko not found.
> [root@websrv1 log]#
>
> I cant start modprobe can you pls advise ?

Try without .ko:

# modpobe ipt_hashlimit


Gr,
Rob