hi all..
I am new to firewall and iptables..

I am using embedded system(ARM).linux kernel is 2.4.18..

Can anyone tell me how to configure iptables for my embedded system..?

Thank you ..

when I tried this command in my system..

[root@INNOVATE /]$iptables -F
modprobe: Can't locate module ip_tables
iptables v1.2.9: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Can anyone help me regarding this??

Thank you..

What happens if you modprobe that module?

Your 2.4 kernel possibly uses the slightly older ipchains instead of iptables. The usage is somewhat similar but still slightly different. But there are lots of good howtos for that as well.

Anything is possible, but that would be really weird. ipchains is what Linux 2.2 used - not Linux 2.4.

Oh, that may be possible. I could have sworn that ipfwadm is what 2.2 used and ipchains was introduced with 2.4 but I seem to have confused things. Sorry.

I used modprobe command..

[root@INNOVATE /root]$modprobe ip_tables
modprobe: Can't locate module ip_tables


Is that problem with iptable versions or something else..??What is the next step I can take..??

When I tried to flush iptables..I got..

[root@INNOVATE /root]$iptables -F
modprobe: Can't locate module ip_tables
iptables v1.2.8: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Thank you..

What is the next step I can take..????Can anyone help me??

Thank you..

Not sure, but it sounds like you'll need to recompile your kernel/modules, making sure that you have properly enabled Netfilter/iptables support in the config. FWIW, here's a glimpse at what one of my 2.4 configs looks like:Once you'e recompiled your kernel/modules, proceed to boot them and then recompile iptables.

Sorry for late reply..

I have recompiled my kernel..Iptable support in netfilter configuration was not enabled..now I enable that..below is the current netfilter config..
---------------------------------------------
# IP: Netfilter Configuration
#
# CONFIG_IP_NF_CONNTRACK is not set
# CONFIG_IP_NF_QUEUE is not set
CONFIG_IP_NF_IPTABLES=m
# CONFIG_IP_NF_MATCH_LIMIT is not set
# CONFIG_IP_NF_MATCH_MAC is not set
# CONFIG_IP_NF_MATCH_MARK is not set
# CONFIG_IP_NF_MATCH_MULTIPORT is not set
# CONFIG_IP_NF_MATCH_TOS is not set
# CONFIG_IP_NF_MATCH_AH_ESP is not set
# CONFIG_IP_NF_MATCH_LENGTH is not set
# CONFIG_IP_NF_MATCH_TTL is not set
# CONFIG_IP_NF_MATCH_TCPMSS is not set
# CONFIG_IP_NF_MATCH_UNCLEAN is not set
# CONFIG_IP_NF_MATCH_OWNER is not set
CONFIG_IP_NF_FILTER=m
# CONFIG_IP_NF_TARGET_REJECT is not set
# CONFIG_IP_NF_TARGET_MIRROR is not set
# CONFIG_IP_NF_MANGLE is not set
# CONFIG_IP_NF_TARGET_LOG is not set
# CONFIG_IP_NF_TARGET_ULOG is not set
# CONFIG_IP_NF_TARGET_TCPMSS is not set
# CONFIG_IP_NF_COMPAT_IPCHAINS is not set
# CONFIG_IP_NF_COMPAT_IPFWADM is not set
-----------------------------------------
Is it necessory to add other options also..??(as your config file?)
I have booted my board again..
Can you tel me how to recompile iptables..?


Thank you..

No, the only necessary options are the ones you need.

The iptables tarball includes an INSTALL file with instructions.

U mean to say I have to install iptables again..??

Thank you..

Yes, you recompile it so that the binaries will match your kernel's new configuration - then you install it.

Sorry for my very basic questions..I am new to this..

How to recompile iptables.?Where I will get its source.?

Is iptables are necessory for ssh..??

Thank you..

At the iptables Web page.

Once again, instructions are in the INSTALL file.

No.