On Sat, 24 Sep 2005 21:25:07 +0000
Michael Kjorling <[EMAIL PROTECTED]> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> My system is AMD64, Linux 2.6.12-gentoo-r10 (from gentoo-sources),
> iptables 1.3.2 and generally up-to-date. I can't seem to get iptables
> to work. Netfilter support is compiled into the kernel (compiling it
> as a module and loading that gave the same result), as evidenced by:
> 
> $ zgrep -i iptables /proc/config.gz
> CONFIG_IP_NF_IPTABLES=y
> $ 
> 
> but iptables refuses to run:
> 
> # iptables -L -n
> FATAL: Module ip_tables not found.
> iptables v1.3.2: can't initialize iptables table `filter': Table does
> not exist (do you need to insmod?) Perhaps iptables or your kernel
> needs to be upgraded. # 
> 
> `iptables -X filter' gives me the same error message.
> 
> Any suggestions as for how to get packet filtering working (including
> kernel configuration options to try) would be greatly appreciated.
> 
> - -- 
> Michael Kjörling, [EMAIL PROTECTED] - http://michael.kjorling.com/
> * ASCII Ribbon Campaign: Against HTML Mail, Proprietary Attachments *
> * ..... No bird soars too high if he soars with his own wings ..... *
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> 
> iD8DBQFDNcQzdY+HSb3praYRAmkVAJ4+l7uFwHsfQc5McejmrljuSLoWlwCgnjQP
> eXGRvHKghiIcqXZephmOvn0=
> =4Iep
> -----END PGP SIGNATURE-----
Hi,
Not very much info i'm afraid, but a working solution.
Choose to use shorewall and in their site-docs (pdf including) there is
a graphical example of kernel config to use with shorewall.
As their's intentions are for shorewall to be mostly used for quite
everything with iptables, it has IIRC quite all options turned ON under
iptables. Use this for some 2,5 years (with very small changes).
Think you can also check the iptables site/docs (Google too).
There was some site (easyiptables/easyfirewall) with a web-page menu
driven config, don't know about kernel-config (check this ML archives).
HTH. Rumen

Attachment: pgpf5osYPWp0o.pgp
Description: PGP signature

Reply via email to