On Mon, 06 Oct 2003 13:45:37 -0400 gabriel <[EMAIL PROTECTED]> wrote:

> On Mon, 2003-10-06 at 11:51, HvR wrote:
> > i wanted to set up shorewall firewall but noticed that i dont have the
> > iptables module compiled in my gentoo-sources kernel, what do i turn
> > on in the kernel config to make it compile it?
> > 
> > i have tried a bunch of stuff but either it still doesnt compile or
> > the compile breaks. my current kernel is 2.4.2-gentoo-r7 i have run
> > genkernel --config and set the iptable (replaces ipchains) compile
> > option but that doesnt seem to be enough.
> 
> i don't know anything about genkernel, but if you manually config your
> kernel, you only need to enable the following:
> 
>   networking options > network packet filtering
>   networking options > ip netfilter configuration > ip tables support
>   networking options > ip netfilter configuration > [stuff]
> 
> where [stuff] is the list of stuff you want enabled for iptables. 
> connection tracking is a good one to have, so is limit matching if
> you're doing a gateway.  quota matching is good for a multi-user box.
> etc. etc.
> 

Just to keep this on topic, the guy wants to run shorewall, so "stuff"
translates to be the list of "stuff" recommended at the shorewall site, not the
stuff "you" want enabled.

-- 
Collins Richey - Denver Area
if you fill your heart with regrets of yesterday and the 
worries of tomorrow, you have no today to be thankful for.



--
[EMAIL PROTECTED] mailing list

Reply via email to