> I just upgraded my home firewall from dachstein-pr4 to the
> dachstein-rc1-1680.bin image and I use seawall for firewall rules.
>
> I've noticed that the ip_masq_* modules are not included in the rc1
> image, which broke the port forwarding to the web server in my DMZ.
> Downloading and loading the ip_masq_portfw.o module from Charles'
> website fixed that.
>
> I didn't see anything about the removal of these modules in the rc1
> changelog, so I'm guessing their removal might have been accidental.

This is an undocumented difference in the two distributions.  The floppy is
intended as a personal or small business firewall.  The CD is still pretty
much a packaged version of my 'industrial' firewall.  The core contents are
the same, but until about 2 weeks ago, I had never run dhclient on the CD
release (all installs were static IP routing/protecting blocks of public
IP's).  That's why weblet isn't configured to run properly either...

I'll update the Dachstein CD config to match the floppy for the next
release...I can easily 'back-out' changes for things like the ip_masq
modules (the only one I load by default is ftp)...

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)



_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to