Peter Humphrey pe...@prh.myzen.co.uk writes:
On Saturday 03 January 2015 16:04:04 lee wrote:
does someone exactly know which options/modules are required for
shorewall? I'm about to do a three-interface configuration, one of the
interfaces being a bridge. I couldn't find any documentation for recent
kernels and don't like the idea of enabling featuures that aren't
required.
I can't say exactly which modules you need, but I think Shorewall will tell
you about anything it can't find. At any rate, I remember having to set
something in the kernel before it would run.
# shorewall check
is your friend.
Well, it didn't really tell me. I got to the point where it claimed
that matching support isn't enabled, though it was. There seem to be
different implementations of the firewall stuff, and I had to enable it
at another place. These billions of network options seem like quite a
mess ...
Now I probably have enabled a lot of things I don't need. At least it's
working :)
--
Again we must be afraid of speaking of daemons for fear that daemons
might swallow us. Finally, this fear has become reasonable.