rc.firewall issues 2.4 to 2.6 upgrade

smarthouseguy · 03-30-2006, 03:24 AM

this is my config minus firewall stuff for 2.4 kernel

Code:

insmod ip_tables
insmod ip_conntrack
insmod ip_conntrack_ftp
insmod ipt_state
insmod iptable_nat
insmod ipt_MASQUERADE



echo 1 > /proc/sys/net/ipv4/ip_forward



iptables --flush


iptables --table nat --flush
iptables --delete-chain


iptables --table nat --delete-chain


iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE
iptables --append FORWARD --in-interface eth0 -j ACCEPT

but on boot with 2.6.15.6 i get the following errors

Code:

insmod:can't read 'ip_tables'; no such file or directory
insmod:can't read 'ip_conntrack'; no such file or directory
insmod:can't read 'ip_conntrack_ftp'; no such file or directory
insmod:can't read 'ipt_state'; no such file or directory
insmod:can't read 'iptable_nat'; no such file or directory
insmod:can't read 'ipt_MASQUERADE'; no such file or directory

so when i take the insmod stuff out of the config this is what I'm left with

Code:

echo 1 > /proc/sys/net/ipv4/ip_forward



iptables --flush


iptables --table nat --flush
iptables --delete-chain


iptables --table nat --delete-chain


iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE
iptables --append FORWARD --in-interface eth0 -j ACCEPT

this seems to work ok in 2.6.15.6 so am I right to assume that insmod is no longer needed??

Any other suggestions??

gbonvehi · 03-30-2006, 03:55 AM

Probably you compiled that stuff as built-in into the kernel and not as module, that's probaby why insmod can't see it (but it's already on the kernel, there's no need to load it).

Linux.tar.gz · 03-30-2006, 11:21 PM

Use modprobe instead of insmod.
Be sure to have compiled netfilter.