Re: ip_conntrack vs. nf_conntrack

[Martin <mylists@itcom.com.ar>]

On Fri, 2008-05-16 at 17:08 +0200, Pascal Hambourg wrote:
> Hello,
> 
> Martin a écrit :
> > 
> > I use to have a 2.6.18 kernel with some patches, including POM and
> > netfilter ones. The modules I insmod are ip_conntrack_ftp,
> > ip_conntrack_irc, ip_conntrack_tftp, ip_conntrack_amanda and
> > ip_conntrack_sip.
> > 
> > Asking around, have finally find that to get patches on mainstream, some
> > names've changed and some code have been modified ¿is that right?
> 
> nf_conntrack is layer 3-independent and works with both IPv4 and IPv6, 
> while ip_conntrack was IPv4-only.
> 
> > Anyway, there aren't nf_conntrack_amanda, nf_conntrack_irc, etc. ¿are
> > there available by now, or need some extra patches or something else?
> 
> Most of them were introduced in kernel 2.6.20 along with IPv4 stateful 
> NAT. Aliases have been defined, so you can keep using the old names.

Thanks Pascal for the response.

Couldn't find any documentation about that on netfilter site, but've
seen that on the list.

When compiling kernel there are potions to introduce them in netfilter
modules, but there aren't modules or aliases to those names ¿can you
tell me how to add those alias? insmod keep telling me that
ip_conntrack_amanda and ftp couldn't be loaded (I keep trying to load
them on my firewall script). 
I've found nf_conntrack_* files, but are .h ones, and are at the include
path of the kernel source code, at netfilter section.


I'll keep searching for more info.

Cheers.

Martin