On Wed, 3 Apr 2002 08:04:38 +0200
[EMAIL PROTECTED] wrote:
> Hi,
>
> if you want to use ftp, there is a special conntrack module in the
> kernel-tree.
>
> For IRC you need to get the conntrack module from the iptables
> patch-o-matic, I think. Then you have to recompile your kernel.
>
> Than it should work.
>
> Best Regards,
> MfG.
>
> Stefan Walther
> [EMAIL PROTECTED]
> dienst.: +4930/89786448
> Funk: +49172/3943961
>
> --------------------------------------------------------------
> Linux/UNIX is like an Indian Tipi:
> No Windows, no Gates and Apache inside.
>
Well, that's what I was thinking... I'm running Slackware 8 and it
comes with kernel 2.4.5, when I got kernel 2.4.18 I compiled all
the netfilter stuff as modules and all the modules are loaded.
So I've already done the necessary recompiling.
*** output from lsmod follows: ***
iptable_mangle 2096 1
iptable_filter 1712 0
ipt_unclean 6688 0 (unused)
ipt_ttl 608 0 (unused)
ipt_tos 448 0 (unused)
ipt_tcpmss 912 0 (unused)
ipt_state 608 0
ipt_owner 1072 0 (unused)
ipt_multiport 608 0 (unused)
ipt_mark 448 0 (unused)
ipt_mac 640 0 (unused)
ipt_limit 944 0
ipt_length 496 0 (unused)
ipt_esp 544 0 (unused)
ipt_ah 528 0 (unused)
ipt_ULOG 3392 0 (unused)
ipt_TOS 992 17
ipt_TCPMSS 2288 0 (unused)
ipt_REJECT 2768 0
ipt_REDIRECT 720 0 (unused)
ipt_MIRROR 1008 0 (unused)
ipt_MASQUERADE 1184 1
ipt_MARK 720 0 (unused)
ipt_LOG 3136 0
ip_queue 5136 0
ip_nat_snmp_basic 7600 0 (unused)
ip_nat_irc 2304 0 (unused)
ip_nat_ftp 2912 0 (unused)
iptable_nat 12576 5 [ipt_REDIRECT ipt_MASQUERADE ip_nat_snmp_basic
ip_nat_irc ip_nat_ftp]
ip_conntrack_irc 2432 0 (unused)
ip_conntrack_ftp 3120 0 (unused)
ip_conntrack 12496 4 [ipt_state ipt_REDIRECT ipt_MASQUERADE
ip_nat_irc ip_nat_ftp iptable_nat
ip_conntrack_irc ip_conntrack_ftp]
*** END OUTPUT ***
As you can see, all the modules are compiled and loaded, but
FTP and DCC (IRC) transfers are not working. By the way, the only
thing I DIDN'T compile as a module was iptables itself, which I compiled
into the kernel. The rest of the netfilter stuff is modules.
It just isn't working this way.
Any suggestions would be helpful.
Thank You,
GRE