Hello there, this is my first post.

I have been using RedHat 9.0 since it first came out.
When fedora core 1.0 first came out, I had problem when recompiling iptables. Iptables didnt work after the recompile.
For this reason I never move beyond redhat 9.0.

I thought I give it a try to move to CENTOS 5.1.
After recompiling the 2.6.24.2 kernel on CENTOS 5.1 and iptables 1.4.0, iptables failed to work.

On close examination of /usr/src/linux-2.6.24.2/.config, many CONFIG_IP_NF* parameters were missing. I couldn't figure a way to insert the CONFIG_IP_NF* parameters via make menuconfig.

I edited a copy of .config in the /root directory and then copied it to /usr/src/linux-2.6.24.2 directory. Somehow after the "make menuconfig" it is overwritten.

It somehow was easier done on redhat 9.00 with 2.4.36 kernel.

Anybody have any idea how I can fix this probem.

Regards,
Tan Chin Huat

Two guesses:

1. Did you recompile iptables against the new kernel?

2. Did you check the standard (1.3.5....) src rpm to see if it required any special tricks?


3. There may be a reason why the newer versions (above 1.3.5) are not yet supported. Backing this up would be that even F8 is only on 1.3.8.

Good morning Lazlow, thank you for the quick response.

1) yes, i recompiled iptables 1.3.7 and 1.4.0 from source in the new kernel.

2) sorry, i did not use rpm. i have been compiling from source for a long time.
rpm always give me dependency problems.

3)

I did some checking and found that after recompiling the kernel, the /usr/src/linux-2.6.24.2/.config files are missing
a lot of CONFIG_IP_NF* modules.

I am trying centos because of "xen". "xen" on centos doesn't look stable.
i thought i try "kvm". but "kvm" needs 2.6.20 kernel and above. this is why i tried to upgrade centos 2.6.18 kernel to
2.6.24.2 or even 2.6.24.3.

2. src.rpm packages are source packages(src)not binaries. The spec file contained in the src.rpm can give you a good hint about how to go about it.

If you use yum it will take care of the dependency issues for you (thats its purpose).

okay. will give it a try.

thanks again.