Brian J. Murrell wrote: > I've found that for some reason, all of a sudden, I need to include > modules such as the following in shorewall's modules file for my openwrt > platform: > > loadmodule ipt_LOG > loadmodule ipt_CONNMARK > loadmodule ipt_connmark > loadmodule ipt_pkttype > loadmodule ipt_mac > > I have been using this device for a month or two now and having to do > this just this morning is a new requirement so something has changed. > I'm just not quite sure what. > > How are these ipt_* kernel modules normally loaded on a Linux system in > response to Shorewall wanting to add rules such as > > + /usr/sbin/iptables -t mangle -A OUTPUT -m connmark ! --mark 0/0xFF -j > CONNMARK --restore-mark --mask 0xFF > > Knowing that will help me figure out what I have broken on my openwrt > router.
They are loaded by the module autoloader in the kernel. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
