I built a 2.4.24 kernel with modularized iptable support. As far as I can tell most features run fine with the exception of shorewall when when it tries to use the target TOS.
here is some debug output from firewall
run_iptables -t mangle -A outtos -p tcp -d 0.0.0.0/0 --dport ssh -j TOS --set-tos 16
iptables -t mangle -A outtos -p tcp -d 0.0.0.0/0 --dport ssh -j TOS --set-tos 16
iptables v1.2.9: Couldn't load target `TOS'
and here is lsmod, output obviously ipt_TOS gets loaded
styx: -root-
# lsmod
Module Pages Used by
ipt_MASQUERADE 1132 0
sch_sfq 3328 0 (unused)
sch_ingress 1372 0 (unused)
sch_htb 18240 0 (unused)
cls_u32 4312 0 (unused)
wd1100 2324 2
ipt_state 380 2
ipt_TOS 844 0 (unused)
ipt_REDIRECT 588 0 (unused)
ipt_REJECT 3024 0
ipt_ULOG 4100 0 (unused)
ipt_LOG 3604 0
ip_nat_irc 2152 0 (unused)
ip_nat_ftp 2760 0 (unused)
ip_conntrack_irc 2844 1
ip_conntrack_ftp 3548 1
ipt_multiport 436 0
ipt_conntrack 864 0
iptable_mangle 1932 0
iptable_nat 15088 2 [ipt_MASQUERADE ipt_REDIRECT ip_nat_irc ip_nat_ftp]
iptable_filter 1472 1
ip_tables 11448 14 [ipt_MASQUERADE ipt_state ipt_TOS ipt_REDIRECT ipt_REJECT ipt_ULOG ipt_LOG ipt_multiport ipt_conntrack iptable_mangle iptable_nat iptable_filter]
ip_conntrack 17928 5 [ipt_MASQUERADE ipt_state ipt_REDIRECT ip_nat_irc ip_nat_ftp ip_conntrack_irc ip_conntrack_ftp ipt_conntrack iptable_nat]
natsemi 15176 1
ide-disk 12556 0
ide-detect 144 0 (unused)
ide-core 89424 0 [ide-disk ide-detect]
What am I missing?
Thanks Erich
THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC 3954 3BC8 C024 8D8A B7D4 FF9D 05B8 0A16
------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________ leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
