Re: [gentoo-user] shorewall: which kernel options/modules

2015-01-03 Thread Peter Humphrey
On Saturday 03 January 2015 16:04:04 lee wrote:

 does someone exactly know which options/modules are required for
 shorewall?  I'm about to do a three-interface configuration, one of the
 interfaces being a bridge.  I couldn't find any documentation for recent
 kernels and don't like the idea of enabling featuures that aren't
 required.

I can't say exactly which modules you need, but I think Shorewall will tell 
you about anything it can't find. At any rate, I remember having to set 
something in the kernel before it would run.

# shorewall check

is your friend.

-- 
Rgds
Peter.




Re: [gentoo-user] shorewall: which kernel options/modules

2015-01-03 Thread lee
Peter Humphrey pe...@prh.myzen.co.uk writes:

 On Saturday 03 January 2015 16:04:04 lee wrote:

 does someone exactly know which options/modules are required for
 shorewall?  I'm about to do a three-interface configuration, one of the
 interfaces being a bridge.  I couldn't find any documentation for recent
 kernels and don't like the idea of enabling featuures that aren't
 required.

 I can't say exactly which modules you need, but I think Shorewall will tell 
 you about anything it can't find. At any rate, I remember having to set 
 something in the kernel before it would run.

 # shorewall check

 is your friend.

Well, it didn't really tell me.  I got to the point where it claimed
that matching support isn't enabled, though it was.  There seem to be
different implementations of the firewall stuff, and I had to enable it
at another place.  These billions of network options seem like quite a
mess ...

Now I probably have enabled a lot of things I don't need.  At least it's
working :)


-- 
Again we must be afraid of speaking of daemons for fear that daemons
might swallow us.  Finally, this fear has become reasonable.