/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */

Please don't post using HTML.


On Sun, 2002-01-06 at 19:44, Hatem AbouHassan wrote:
> I've installed the latest Redhat 7.2 with 2.4.7-10 kernel...
> Installation went fine. (I guess) but when I tried to follow the 
> IP-Masquerading HOWTO I realized that I have to use iptables instead
> ipchains because it is kernel 2.4

You don't have to use iptables, but if you use ipchains, you will only
have limited functionality as the ipchains available for the 2.4.x
kernels is really a limited compatibility wrapper.

> Anyway, I tried to follow the instructions, which implies that I have
> to re-compile the kernel and setup the proper configurations..

This is incorrect.  The kernel supplied with RH7.2 will work just fine. 
However, you will want to install the various updates for RH7.2 as there
is an update for iptables and a few other security related fixes.

> The problem I am having is when I tried to 
> /lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o:
> init_module: Device or resource busy
> Hint: insmod errors can be caused by incorrect module parameters,
> including invalid IO or IRQ parameters
> /lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o: insmod
> /lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o failed
> /lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ip_tables.o: insmod
> ip_tables failed
> iptables v1.2.3: can't initialize iptables table `filter': iptables
> who? (do you need to insmod?)
> Perhaps iptables or your kernel needs to be upgraded.

These messages are a little cryptic and misleading to someone just
starting out.  However, RH7.2 makes an attempt to install a firewall by
default.  The firewall they provide uses ipchains and you can't use both
ipchains and iptables at the same time.  Thus, the "Device or resource
busy" error that you're getting.  Francis' instructions will help remove
ipchains from starting.  There are ways of doing it that don't require a
restart, but since this is not yet a production system, it shouldn't
matter.

If you continue to have problems following the HOWTO, perhaps you should
give my script a shot.  You can get the latest version of it at
http://www.asgardsrealm.net/linux/firewall.

Jamin W. Collins

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to