LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices



Reply
 
Search this Thread
Old 12-01-2008, 01:13 AM   #1
bapigoo9
Member
 
Registered: Aug 2008
Posts: 107

Rep: Reputation: 16
Slackware 12 Bob's Firewall modules needed or not in installation?


From Alien Bob's Firewall for Slackware: http://www.slackware.com/~alien/efg

There are a lot of various modules added to the kernel with modprobe. For the SMP kernel for Slackware 12, a 2.6.24.x kernel, what modules are needed for the Firewall with iptables?

How does iptables react if you do not have the needed module and you have a rule that uses that netfilter? Such as, if you have rule to log and drop invalid packets, but do not have the "ipt_unclean" module?

There are some modules that are not in the installtion for Slackware 12 (full install). Such as: multiport, ipt_unclean, ...
Are these modules needed, and where do you get them from?
 
Old 12-01-2008, 11:25 PM   #2
JazzItSelf
Member
 
Registered: Oct 2003
Location: Boston
Distribution: Slackware64-current
Posts: 42

Rep: Reputation: 18
I believe all of the modules iptables would ever use are a part of the kernel source tree. You'd have to build and install them yourself. The process is similar to building a custom kernel.

If I remember correctly, if you don't have a required module built and installed, iptables spits up an error at you. Since each rule is entered as a separate command, one rule failing doesn't prevent other rules from being added (unless they depend on the failed rule).
 
Old 12-02-2008, 01:46 AM   #3
bapigoo9
Member
 
Registered: Aug 2008
Posts: 107

Original Poster
Rep: Reputation: 16
This brings up another question, related to the original post. Are any of these modules built into the Slackware kernel?
 
Old 12-02-2008, 02:25 AM   #4
H_TeXMeX_H
Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1269Reputation: 1269Reputation: 1269Reputation: 1269Reputation: 1269Reputation: 1269Reputation: 1269Reputation: 1269Reputation: 1269
AFAIK, all the modules are available in the stock Slackware kernel. So the firewall will work if you just copy and paste the output of the EFG into '/etc/rc.d/rc.firewall' and make it executable.
 
Old 12-02-2008, 06:14 AM   #5
brianL
LQ 5k Club
 
Registered: Jan 2006
Location: Oldham, Lancs, England
Distribution: Slackware & Slackware64 14.1
Posts: 7,135
Blog Entries: 52

Rep: Reputation: Disabled
Quote:
Originally Posted by H_TeXMeX_H View Post
AFAIK, all the modules are available in the stock Slackware kernel. So the firewall will work if you just copy and paste the output of the EFG into '/etc/rc.d/rc.firewall' and make it executable.
Yes. That's what I did, and it works OK.
 
Old 12-02-2008, 08:15 AM   #6
bgeddy
Senior Member
 
Registered: Sep 2006
Location: Liverpool - England
Distribution: slackware64 13.37 and -current, Dragonfly BSD
Posts: 1,810

Rep: Reputation: 227Reputation: 227Reputation: 227
Quote:
Are any of these modules built into the Slackware kernel?
Just have a look ! Run this
Code:
zcat proc/config.gz > ~/myconfig
to get a copy of the running kernel to ~/myconfig. Then edit ~/myconfig and search for IPT to get to the iptables bits.

I've never needed any additional modules with my experience with iptables - but that's not extensive.

I've had a look at a firewall script generated from EFG and note it says this :
Code:
# Unless you have kernel module auto-loading disabled, you should not
# need to manually load each of these modules.  Other than ip_tables,
# ip_conntrack, and some of the optional modules, I've left these
# commented by default.  Uncomment if you have any problems or if
# you have disabled module autoload.  Note that some modules must
# be loaded by another kernel module.
As stated I believe that an error will be generated if functionality is used that either isn't in the kernel or a module doesn't exist.

Mind you, looking at the .config from the generic kernel seems to have everything relevant built so I'm sure this won't be a problem.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Slackware DVD installation help needed 01010011 Linux - Newbie 2 08-13-2008 05:16 AM
Determining Which Modules are needed for boot if all modules are built-in? LinuxGeek Linux - General 4 06-29-2007 11:25 AM
what modules needed for firewire ext. hd? xushi Linux - Software 1 03-10-2006 10:57 AM
/etc/rc.d/rc.modules from Slack 10 needed! czezz Slackware 2 01-27-2005 07:29 AM
how to find modules containing needed symbols? redss Linux - Hardware 1 01-04-2005 02:55 PM


All times are GMT -5. The time now is 08:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration