Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Dan Egli <dan@shortcircuit.dyndns.org>
To: Justin Hammond <fish@dynam.ac>
Cc: netfilter@lists.netfilter.org
Subject: Re: How to disable ip_contrack_irc when its compiled into the kernel?
Date: Fri, 27 Dec 2002 11:27:43 -0700	[thread overview]
Message-ID: <3E0C9B9F.80200@shortcircuit.dyndns.org> (raw)
In-Reply-To: <1041008143.15849.81.camel@fish-dt.dmz.dynam.ac>

Justin Hammond wrote:

>Hi all
>
>We have a problem on one of our servers. Its running:
>
>Linux 2.4.17 on a Sparc Box with IPtables 1.2.4
>
>The Kernel support for IPtables was compiled into the kernel, not as
>loadable modules, and now we have some problems. 
>
>We recently setup a IRC server for a customer, and they came back and
>told us that DCC sending was not working for any client connected to
>this IRC server. A quick check of the logs revealed:
>
>Forged DCC command from 218.103.157.103: 1.154.254.169:0
>Forged DCC command from 218.103.157.103: 1.154.254.169:0
>Forged DCC command from 218.103.157.103: 1.154.254.169:0
>Forged DCC command from 218.103.157.103: 1.154.254.169:0
>
>
>Throughout the entire kernel log. 
>
>(I believe the problem has been fixed in later releases of iptables, so
>I'm not after a fix)
>
>Now here is my problem. The Server is in Sydney, Australia, and I'm in
>Singapore, around 8000Miles away, so doing a remote kernel compile and
>reboot to remove the contrack_irc module is not something that I fancy. 
>
>I'm wondering if there is a Rule or way that I can disable the contrack
>module from operating?
>
>Thanks :)
>
>Justin
>
>
>
>  
>
Unfortunately, I believe that once a module is compiled into the kernel 
it's present, end of discussion. And besides. thats not quite what you 
want is it? removing ip_conntrack_irc would kill ALL irc abilities, not 
just DCC. After all, doens't IRC operate on multiple ports, similiar to FTP?



  reply	other threads:[~2002-12-27 18:27 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-12-27 16:55 How to disable ip_contrack_irc when its compiled into the kernel? Justin Hammond
2002-12-27 18:27 ` Dan Egli [this message]
2002-12-27 18:41   ` Athanasius
2002-12-27 18:47   ` Sascha Reissner
2002-12-27 23:26 ` Alistair Tonner

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3E0C9B9F.80200@shortcircuit.dyndns.org \
    --to=dan@shortcircuit.dyndns.org \
    --cc=fish@dynam.ac \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox