topic Re: rebuilding the kernel with Netfilter support in Operating System - Linux

rebuilding the kernel with Netfilter support

'chris' — Sat, 18 Mar 2006 16:00:05 GMT

hi

howto rebuild the kernel with Netfilter support
on debian sarge stable ?

I have:

# uname -a
Linux server.net 2.6.8-2-686 #1 Tue Aug 16 13:22:48 UTC 2005 i686 GNU/Linux

kind regards
chris

Re: rebuilding the kernel with Netfilter support

Vitaly Karasik_1 — Sun, 19 Mar 2006 15:24:44 GMT

AFAIK, debian kernel (and all modern distros kernels) already configured with netfilter support.

Re: rebuilding the kernel with Netfilter support

Sergejs Svitnevs — Sun, 19 Mar 2006 15:34:29 GMT

Most distributions include this support by default, but anyway you can check it :

# modprobe ip_tables
# lsmod | grep ip_tables

If any of the above commands give an error or ip_tables doesn't show up in module listing, you must enable these options in the kernel configuration using "make menuconfig" or "make xmenuconfig".

Select next options as modules:

1) Code maturity-level options for development and/or incomplete code/drivers
2) Network packet filtering in Networking options.
3) IP: Netfilter Configuration iin Networking options

Regards

Re: rebuilding the kernel with Netfilter support

'chris' — Sun, 19 Mar 2006 18:47:35 GMT

thanks,

I have no errors on debian sarge trying this:

# modprobe ip_tables
# lsmod | grep ip_tables
ip_tables 18464 13 ipt_MASQUERADE,ipt_REJECT,ipt_LOG,ipt_state,ipt_pkttype,ipt_recent,ipt_iprange,ipt_physdev,ipt_multiport,ipt_conntrack,iptable_mangle,iptable_nat,iptable_filter

but, if I try this:

# iptables -Ln
iptables: Table does not exist (do you need to insmod?)

then I get an error.

Re: rebuilding the kernel with Netfilter support

'chris' — Sun, 19 Mar 2006 18:48:31 GMT

any idea what's missing on my system ?

Re: rebuilding the kernel with Netfilter support

Sergejs Svitnevs — Mon, 20 Mar 2006 01:32:14 GMT

You should use "iptables -L -n" instead of "iptables -Ln"

Regards