ip_conntrack not found

mpr.mktg · 03-13-2012, 03:35 PM

Sir,

I have installed Squid on Fedora 14 and using linux box as a Proxy Server.

But when I want to track the incoming and outgoing stuff, i need to put ip_conntrack support into fw.proxy file.

but when i run that file for generating iptables file it gives me below error.

-----------
[root@linux ~]# /etc/fw.proxy
/etc/fw.proxy: line 1: quid: command not found
FATAL: Module ip_conntrack not found.
[root@linux ~]#
-----------
My Fedora version is below.

[root@linux ~]# uname -a
Linux linux 2.6.35.14-106.fc14.i686 #1 SMP Wed Nov 23 13:57:33 UTC 2011 i686 i686 i386 GNU/Linux

Can anyone help with step by step guide to get rid of this error. I am searching this since last 2 weeks and got no help (may be i dont know how to compile it into kernel) but any other way around or step by step help is appreciated.

thank you in advance.

tshikose · 03-14-2012, 06:49 AM

Hi,

You should instruct that module to be loaded before trying to use it.

Check if your as /etc/sysconfig/iptables-config something as:

Code:

$ head /etc/sysconfig/iptables-config
# Load additional iptables modules (nat helpers)
#   Default: -none-
# Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
# are loaded after the firewall rules are applied. Options for the helpers are
# stored in /etc/modprobe.conf.
IPTABLES_MODULES="ip_conntrack"

# Unload modules on restart and stop
#   Value: yes|no,  default: yes
# This option has to be 'yes' to get to a sane state for a firewall

Regards,

mpr.mktg · 03-19-2012, 01:09 AM

Sir,

In my computer I dont find the modprobe.conf file. so what should I do?

Please advice.

rest everything else if there into my firewall as you said.

when i tried searching things into forums i got that it has to be compiled with the kernel so i dont know how to compile with kernel.

can you advice on that.

tshikose · 03-19-2012, 01:58 AM

not modprobe.conf but /etc/sysconfig/iptables-config

By the way, which version of Linux are you using?

mpr.mktg · 03-31-2012, 06:38 AM

I was using fedora 14

but then i decided and formatted it again to Fedora 16

I am now using it.

It working fine.

WizadNoNext · 03-31-2012, 01:22 PM

The modules isn't called ip_conntrack but nf_conntrack_ipv4

henoch · 03-14-2017, 04:39 PM

Sorry for replying to historical thread.

The problem might also be related to lack of kernel support for conntrack option. This should be checked under Network packet filtering framework (Netfilter) > Core Netfilter Configuration > "conntrack" connection tracking match support

There are also more options within the kernel related to conntract and other features. What helped me (having the same message as you) was to recompile the kernel and set all possible netfilter option as modules <M>.

hope this helps