From mboxrd@z Thu Jan 1 00:00:00 1970 From: ads nat Subject: Compiling options for IPTABLES to work. Date: Tue, 16 Sep 2003 01:54:05 -0700 (PDT) Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030916085405.88759.qmail@web20703.mail.yahoo.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1609049480-1063702445=:58075" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org --0-1609049480-1063702445=:58075 Content-Type: text/plain; charset=us-ascii I want to get hands on experience of using iptables, DMZ firewall, DHCP firewall, etc.for which Tutorial says I need to compile kernal with following options OR as modules : CONFIG_NETFILTER CONFIG_IP_NF_CONNTRACK CONFIG_IP_NF_IPTABLES CONFIG_IP_NF_MATCH_LIMIT CONFIG_IP_NF_MATCH_STATE CONFIG_IP_NF_FILTER CONFIG_IP_NF_NAT CONFIG_IP_NF_TARGET_LOG I have installed Redhat Linux 8.0 on server machine which by default installs iptables 1.2.6a. Do Redhat 8.0 install all these modules. How to check whether these modules are installed or not. Thanks --------------------------------- Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software --0-1609049480-1063702445=:58075 Content-Type: text/html; charset=us-ascii
I want to get hands on experience of using iptables, DMZ firewall, DHCP firewall, etc.for which Tutorial says I need to compile kernal with following options OR as modules :
 
  • CONFIG_NETFILTER

  • CONFIG_IP_NF_CONNTRACK

  • CONFIG_IP_NF_IPTABLES

  • CONFIG_IP_NF_MATCH_LIMIT

  • CONFIG_IP_NF_MATCH_STATE

  • CONFIG_IP_NF_FILTER

  • CONFIG_IP_NF_NAT

  • CONFIG_IP_NF_TARGET_LOG

I have installed Redhat Linux 8.0 on server machine which by default installs iptables 1.2.6a.

Do Redhat 8.0 install all these modules. How to check whether these modules are installed or not. 

Thanks

 


Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software --0-1609049480-1063702445=:58075-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeffrey Laramie Subject: Re: Compiling options for IPTABLES to work. Date: Tue, 16 Sep 2003 09:15:11 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3F670CDF.3020007@Loudoun-Fairfax.com> References: <20030916085405.88759.qmail@web20703.mail.yahoo.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="------------010306060306070907080300" Return-path: In-Reply-To: <20030916085405.88759.qmail@web20703.mail.yahoo.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: ads nat Cc: netfilter@lists.netfilter.org This is a multi-part message in MIME format. --------------010306060306070907080300 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit ads nat wrote: > I want to get hands on experience of using iptables, DMZ firewall, > DHCP firewall, etc.for which Tutorial says I need to compile kernal > with following options OR as modules : > > > * > > CONFIG_NETFILTER > > * > > CONFIG_IP_NF_CONNTRACK > > * > > CONFIG_IP_NF_IPTABLES > > * > > CONFIG_IP_NF_MATCH_LIMIT > > * > > CONFIG_IP_NF_MATCH_STATE > > * > > CONFIG_IP_NF_FILTER > > * > > CONFIG_IP_NF_NAT > > * > > CONFIG_IP_NF_TARGET_LOG > > I have installed Redhat Linux 8.0 on server machine which by default > installs iptables 1.2.6a. > > Do Redhat 8.0 install all these modules. How to check whether these > modules are installed or not. > > Thanks > The stock Redhat kernels load these routines as modules. Run: /sbin/lsmod to see which modules are currently loaded. Note that the module name is not going to be the exact same name as the kernel option i.e. if kernel option CONFIG_IP_NF_CONNTRACK is loaded as a module it will be loaded as module ip_conntrack. Jeff --------------010306060306070907080300 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit ads nat wrote:
I want to get hands on experience of using iptables, DMZ firewall, DHCP firewall, etc.for which Tutorial says I need to compile kernal with following options OR as modules :
 
  • CONFIG_NETFILTER

  • CONFIG_IP_NF_CONNTRACK

  • CONFIG_IP_NF_IPTABLES

  • CONFIG_IP_NF_MATCH_LIMIT

  • CONFIG_IP_NF_MATCH_STATE

  • CONFIG_IP_NF_FILTER

  • CONFIG_IP_NF_NAT

  • CONFIG_IP_NF_TARGET_LOG

I have installed Redhat Linux 8.0 on server machine which by default installs iptables 1.2.6a.

Do Redhat 8.0 install all these modules. How to check whether these modules are installed or not. 

Thanks


The stock Redhat kernels load these routines as modules. Run: /sbin/lsmod to see which modules are currently loaded. Note that the module name is not going to be the exact same name as the kernel option i.e.  if kernel option CONFIG_IP_NF_CONNTRACK is loaded as a module it will be loaded as module ip_conntrack.

Jeff
--------------010306060306070907080300-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: ads nat Subject: Re: Compiling options for IPTABLES to work. Date: Tue, 16 Sep 2003 06:54:04 -0700 (PDT) Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030916135404.26996.qmail@web20709.mail.yahoo.com> References: <3F670CDF.3020007@Loudoun-Fairfax.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="0-2048600242-1063720444=:24080" Return-path: In-Reply-To: <3F670CDF.3020007@Loudoun-Fairfax.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Jeffrey Laramie Cc: netfilter@lists.netfilter.org --0-2048600242-1063720444=:24080 Content-Type: text/plain; charset=us-ascii Following are the modules loaded : [root@xyz root]# /sbin/lsmod Module Size Used by Not tainted sr_mod 18136 2 (autoclean) soundcore 6532 0 (autoclean) ipip 8772 1 (autoclean) autofs 13348 0 (autoclean) (unused) 8139too 17704 2 mii 2156 0 [8139too] ipt_MASQUERADE 2200 1 (autoclean) ipt_REDIRECT 1368 1 (autoclean) iptable_nat 19960 1 (autoclean) [ipt_MASQUERADE ipt_REDIRECT] ip_conntrack 21244 1 (autoclean) [ipt_MASQUERADE ipt_REDIRECT iptab le_nat] iptable_filter 2412 1 (autoclean) ip_tables 14936 6 [ipt_MASQUERADE ipt_REDIRECT iptable_nat iptab le_filter] ide-scsi 10512 1 ide-cd 33608 0 cdrom 33696 0 [sr_mod ide-cd] mousedev 5524 1 keybdev 2976 0 (unused) hid 22244 0 (unused) input 5888 0 [mousedev keybdev hid] usb-uhci 26188 0 (unused) ehci-hcd 17480 0 (unused) usbcore 77024 1 [hid usb-uhci ehci-hcd] ext3 70368 5 jbd 52212 5 [ext3] aic7xxx 137140 6 sd_mod 13552 12 scsi_mod 107144 4 [sr_mod ide-scsi aic7xxx sd_mod] Are these modules O.K. for what I want to do? Please guide. Thanks Jeffrey Laramie wrote: ads nat wrote: I want to get hands on experience of using iptables, DMZ firewall, DHCP firewall, etc.for which Tutorial says I need to compile kernal with following options OR as modules : CONFIG_NETFILTER CONFIG_IP_NF_CONNTRACK CONFIG_IP_NF_IPTABLES CONFIG_IP_NF_MATCH_LIMIT CONFIG_IP_NF_MATCH_STATE CONFIG_IP_NF_FILTER CONFIG_IP_NF_NAT CONFIG_IP_NF_TARGET_LOG I have installed Redhat Linux 8.0 on server machine which by default installs iptables 1.2.6a. Do Redhat 8.0 install all these modules. How to check whether these modules are installed or not. Thanks The stock Redhat kernels load these routines as modules. Run: /sbin/lsmod to see which modules are currently loaded. Note that the module name is not going to be the exact same name as the kernel option i.e. if kernel option CONFIG_IP_NF_CONNTRACK is loaded as a module it will be loaded as module ip_conntrack. Jeff --------------------------------- Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software --0-2048600242-1063720444=:24080 Content-Type: text/html; charset=us-ascii
Following are the modules loaded :
[root@xyz root]# /sbin/lsmod
Module                  Size  Used by    Not tainted
sr_mod                 18136   2  (autoclean)
soundcore               6532   0  (autoclean)
ipip                    8772   1  (autoclean)
autofs                 13348   0  (autoclean) (unused)
8139too                17704   2
mii                     2156   0  [8139too]
ipt_MASQUERADE          2200   1  (autoclean)
ipt_REDIRECT            1368   1  (autoclean)
iptable_nat            19960   1  (autoclean) [ipt_MASQUERADE ipt_REDIRECT]
ip_conntrack           21244   1  (autoclean) [ipt_MASQUERADE ipt_REDIRECT iptab
le_nat]
iptable_filter          2412   1  (autoclean)
ip_tables              14936   6  [ipt_MASQUERADE ipt_REDIRECT iptable_nat iptab
le_filter]
ide-scsi               10512   1
ide-cd                 33608   0
cdrom                  33696   0  [sr_mod ide-cd]
mousedev                5524   1
keybdev                 2976   0  (unused)
hid                    22244   0  (unused)
input                   5888   0  [mousedev keyb dev hid]
usb-uhci               26188   0  (unused)
ehci-hcd               17480   0  (unused)
usbcore                77024   1  [hid usb-uhci ehci-hcd]
ext3                   70368   5
jbd                    52212   5  [ext3]
aic7xxx               137140   6
sd_mod                 13552  12
scsi_mod              107144   4  [sr_mod ide-scsi aic7xxx sd_mod]

Are these modules O.K. for what I want to do?
Please guide.
Thanks

Jeffrey Laramie <JALaramie@Loudoun-Fairfax.com> wrote:
ads nat wrote:
I want to get hands on experience of using iptables, DMZ firewall, DHCP firewall, etc.for which Tutorial says I need to compile kernal with following options OR as modules :
 
  • CONFIG_NETFILTER

  • CONFIG_IP_NF_CONNTRACK

  • CONFIG_IP_NF_IPTABLES

  • CONFIG_IP_NF_MATCH_LIMIT

  • CONFIG_IP_NF_MATCH_STATE

  • CONFIG_IP_NF_FILTER

  • CONFIG_IP_NF_NAT

  • CONFIG_IP_NF_TARGET_LOG

I have installed Redhat Linux 8.0 on server machine which by default installs iptables 1.2.6a.

Do Redhat 8.0 install all these modules. How to check whether these modules are installed or not. 

Thanks


The stock Redhat kernels load these routines as modules. Run: /sbin/lsmod to see which modules are currently loaded. Note that the module name is not going to be the exact same name as the kernel option i.e.  if kernel option CONFIG_IP_NF_CONNTRACK is loaded as a module it will be loaded as module ip_conntrack.

Jeff


Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software --0-2048600242-1063720444=:24080-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeffrey Laramie Subject: Re: Compiling options for IPTABLES to work. Date: Tue, 16 Sep 2003 10:45:38 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3F672212.9070908@Loudoun-Fairfax.com> References: <20030916135404.26996.qmail@web20709.mail.yahoo.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="------------020102030301080208050705" Return-path: In-Reply-To: <20030916135404.26996.qmail@web20709.mail.yahoo.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: ads nat Cc: netfilter@lists.netfilter.org This is a multi-part message in MIME format. --------------020102030301080208050705 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit ads nat wrote: > Following are the modules loaded : > [root@xyz root]# /sbin/lsmod > Module Size Used by Not tainted > sr_mod 18136 2 (autoclean) > soundcore 6532 0 (autoclean) > ipip 8772 1 (autoclean) > autofs 13348 0 (autoclean) (unused) > 8139too 17704 2 > mii 2156 0 [8139too] > ipt_MASQUERADE 2200 1 (autoclean) > ipt_REDIRECT 1368 1 (autoclean) > iptable_nat 19960 1 (autoclean) [ipt_MASQUERADE > ipt_REDIRECT] > ip_conntrack 21244 1 (autoclean) [ipt_MASQUERADE > ipt_REDIRECT iptab > le_nat] > iptable_filter 2412 1 (autoclean) > ip_tables 14936 6 [ipt_MASQUERADE ipt_REDIRECT > iptable_nat iptab > le_filter] > ide-scsi 10512 1 > ide-cd 33608 0 > cdrom 33696 0 [sr_mod ide-cd] > mousedev 5524 1 > keybdev 2976 0 (unused) > hid 22244 0 (unused) > input 5888 0 [mousedev keybdev hid] > usb-uhci 26188 0 (unused) > ehci-hcd 17480 0 (unused) > usbcore 77024 1 [hid usb-uhci ehci-hcd] > ext3 70368 5 > jbd 52212 5 [ext3] > aic7xxx 137140 6 > sd_mod 13552 12 > scsi_mod 107144 4 [sr_mod ide-scsi aic7xxx sd_mod] > > Are these modules O.K. for what I want to do? > Please guide. > Thanks > The basic modules are loaded. I don't know what you're trying to do, so I don't know if these are all the modules you need. Does it work? Jeff --------------020102030301080208050705 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit ads nat wrote:
Following are the modules loaded :
[root@xyz root]# /sbin/lsmod
Module                  Size  Used by    Not tainted
sr_mod                 18136   2  (autoclean)
soundcore               6532   0  (autoclean)
ipip                    8772   1  (autoclean)
autofs                 13348   0  (autoclean) (unused)
8139too                17704   2
mii                     2156   0  [8139too]
ipt_MASQUERADE          2200   1  (autoclean)
ipt_REDIRECT            1368   1  (autoclean)
iptable_nat            19960   1  (autoclean) [ipt_MASQUERADE ipt_REDIRECT]
ip_conntrack           21244   1  (autoclean) [ipt_MASQUERADE ipt_REDIRECT iptab
le_nat]
iptable_filter          2412   1  (autoclean)
ip_tables              14936   6  [ipt_MASQUERADE ipt_REDIRECT iptable_nat iptab
le_filter]
ide-scsi               10512   1
ide-cd                 33608   0
cdrom                  33696   0  [sr_mod ide-cd]
mousedev                5524   1
keybdev                 2976   0  (unused)
hid                    22244   0  (unused)
input                   5888   0  [mousedev keybdev hid]
usb-uhci               26188   0  (unused)
ehci-hcd               17480   0  (unused)
usbcore                77024   1  [hid usb-uhci ehci-hcd]
ext3                   70368   5
jbd                    52212   5  [ext3]
aic7xxx               137140   6
sd_mod                 13552  12
scsi_mod              107144   4  [sr_mod ide-scsi aic7xxx sd_mod]

Are these modules O.K. for what I want to do?
Please guide.
Thanks

The basic modules are loaded. I don't know what you're trying to do, so I don't know if these are all the modules you need. Does it work?

Jeff
--------------020102030301080208050705--