I just upgraded my kernel from 2.6.13-4 to 2.6.24 (x86_64). I also built
iptables 4.0 and built the netfilter modules for 2.6.24.
I remember reading a while back about the new naming convention netfilter
was using for its modules with newer kernels, but I am having a hard time
finding that thread when googling through the mail list archives.
Now I am getting 'can't load conntrack support for proto=2" errors, and
shorewall dies with:
Compiling /etc/shorewall/masq...
ERROR: a non-empty masq file requires NAT in your kernel and iptables :
/etc/shorewall/masq (line 222)
I assume these errors are related to the new netfilter modules.
While I am searching the archives, I was hoping someone else might
remember this thread or have the solution.
I am running shorewall-4.0.8-2, if it helps.
I have attached the output from 'lsmod' and the contents of my
/lib64/iptables directory in case that might help.
I appreciate your help.
Thanks.
Module Size Used by
iptable_raw 3008 0
iptable_mangle 3456 0
iptable_filter 3712 0
ip_tables 21024 3 iptable_raw,iptable_mangle,iptable_filter
ip6table_filter 3456 1
parport_pc 30440 1
lp 14084 0
parport 39820 2 parport_pc,lp
autofs4 23048 0
eeprom 8720 0
xt_NFQUEUE 2496 0
xt_hashlimit 11736 0
ip6_tables 15376 2 ip6table_filter,xt_hashlimit
xt_tcpmss 2880 0
xt_pkttype 2432 0
xt_CLASSIFY 2432 0
xt_CONNMARK 4160 0
xt_MARK 3264 0
xt_comment 2368 0
xt_length 2560 0
xt_connmark 3392 0
xt_physdev 3216 0
xt_multiport 3904 0
xt_conntrack 4352 0
ipt_ULOG 10696 1
ipt_TTL 2880 0
ipt_ttl 2432 0
ipt_TOS 2816 0
ipt_tos 2176 0
ipt_REJECT 5312 0
ipt_recent 10720 0
ipt_owner 2560 0
ipt_LOG 6784 0
ipt_iprange 2304 0
ipt_ECN 3584 0
ipt_ecn 2816 0
ipt_ah 2432 0
ipt_addrtype 2432 0
sunrpc 190632 3
ipv6 260360 40
tun 12544 1
xt_state 3136 0
nf_conntrack 69344 4 xt_CONNMARK,xt_connmark,xt_conntrack,xt_state
xt_tcpudp 3968 0
x_tables 20680 31
ip_tables,xt_NFQUEUE,xt_hashlimit,ip6_tables,xt_tcpmss,xt_pkttype,xt_CLASSIFY,xt_CONNMARK,xt_MARK,xt_comment,xt_length,xt_connmark,xt_physdev,xt_multiport,xt_conntrack,ipt_ULOG,ipt_TTL,ipt_ttl,ipt_TOS,ipt_tos,ipt_REJECT,ipt_recent,ipt_owner,ipt_LOG,ipt_iprange,ipt_ECN,ipt_ecn,ipt_ah,ipt_addrtype,xt_state,xt_tcpudp
dm_mirror 22144 0
usb_storage 44096 0
dm_mod 59664 1 dm_mirror
button 9888 0
battery 15880 0
ac 7240 0
ehci_hcd 33868 0
ohci_hcd 22980 0
k8temp 6464 0
hwmon 3744 1 k8temp
i2c_nforce2 7040 0
i2c_core 25752 2 eeprom,i2c_nforce2
snd_intel8x0 36328 0
snd_ac97_codec 112536 1 snd_intel8x0
ac97_bus 2944 1 snd_ac97_codec
snd_pcm_oss 41888 0
snd_mixer_oss 17408 1 snd_pcm_oss
snd_pcm 82636 3 snd_intel8x0,snd_ac97_codec,snd_pcm_oss
snd_timer 23752 1 snd_pcm
snd 60456 6
snd_intel8x0,snd_ac97_codec,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_timer
soundcore 8864 1 snd
snd_page_alloc 11344 2 snd_intel8x0,snd_pcm
forcedeth 47948 0
r8169 30724 0
floppy 61640 0
ext3 130896 4
jbd 46632 1 ext3
sata_nv 28552 5
sd_mod 29080 6
total 1372
-rwxr-xr-x 1 root root 10509 Feb 4 18:42 libip6t_ah.so
-rwxr-xr-x 1 root root 11146 Feb 4 18:42 libip6t_dst.so
-rwxr-xr-x 1 root root 7041 Feb 4 18:42 libip6t_eui64.so
-rwxr-xr-x 1 root root 11454 Feb 4 18:42 libip6t_frag.so
-rwxr-xr-x 1 root root 11178 Feb 4 18:42 libip6t_hbh.so
-rwxr-xr-x 1 root root 9616 Feb 4 18:42 libip6t_hl.so
-rwxr-xr-x 1 root root 9398 Feb 4 18:42 libip6t_HL.so
-rwxr-xr-x 1 root root 12034 Feb 4 18:42 libip6t_icmp6.so
-rwxr-xr-x 1 root root 12084 Feb 4 18:42 libip6t_ipv6header.so
-rwxr-xr-x 1 root root 11737 Feb 4 18:42 libip6t_LOG.so
-rwxr-xr-x 1 root root 11414 Feb 4 18:42 libip6t_mh.so
-rwxr-xr-x 1 root root 10626 Feb 4 18:42 libip6t_owner.so
-rwxr-xr-x 1 root root 15188 Feb 4 18:42 libip6t_policy.so
-rwxr-xr-x 1 root root 9989 Feb 4 18:42 libip6t_REJECT.so
-rwxr-xr-x 1 root root 14171 Feb 4 18:42 libip6t_rt.so
-rwxr-xr-x 1 root root 11015 Feb 4 18:42 libipt_addrtype.so
-rwxr-xr-x 1 root root 10039 Feb 4 18:42 libipt_ah.so
-rwxr-xr-x 1 root root 4224 Feb 18 2005 libipt_CLASSIFY.so
-rwxr-xr-x 1 root root 11480 Feb 4 18:42 libipt_CLUSTERIP.so
-rwxr-xr-x 1 root root 4672 Feb 18 2005 libipt_connlimit.so
-rwxr-xr-x 1 root root 4576 Feb 18 2005 libipt_connmark.so
-rwxr-xr-x 1 root root 5280 Feb 18 2005 libipt_CONNMARK.so
-rwxr-xr-x 1 root root 15542 Feb 4 18:42 libipt_conntrack.so
-rwxr-xr-x 1 root root 11008 Feb 4 18:42 libipt_DNAT.so
-rwxr-xr-x 1 root root 6400 Feb 18 2005 libipt_dscp.so
-rwxr-xr-x 1 root root 6368 Feb 18 2005 libipt_DSCP.so
-rwxr-xr-x 1 root root 9692 Feb 4 18:42 libipt_ecn.so
-rwxr-xr-x 1 root root 9365 Feb 4 18:42 libipt_ECN.so
-rwxr-xr-x 1 root root 5336 Feb 18 2005 libipt_esp.so
-rwxr-xr-x 1 root root 4096 Feb 18 2005 libipt_helper.so
-rwxr-xr-x 1 root root 12657 Feb 4 18:42 libipt_icmp.so
-rwxr-xr-x 1 root root 10002 Feb 4 18:42 libipt_iprange.so
-rwxr-xr-x 1 root root 4928 Feb 18 2005 libipt_length.so
-rwxr-xr-x 1 root root 6080 Feb 18 2005 libipt_limit.so
-rwxr-xr-x 1 root root 11733 Feb 4 18:42 libipt_LOG.so
-rwxr-xr-x 1 root root 4632 Feb 18 2005 libipt_mac.so
-rwxr-xr-x 1 root root 4576 Feb 18 2005 libipt_mark.so
-rwxr-xr-x 1 root root 4064 Feb 18 2005 libipt_MARK.so
-rwxr-xr-x 1 root root 9529 Feb 4 18:42 libipt_MASQUERADE.so
-rwxr-xr-x 1 root root 6979 Feb 4 18:42 libipt_MIRROR.so
-rwxr-xr-x 1 root root 6144 Feb 18 2005 libipt_multiport.so
-rwxr-xr-x 1 root root 9592 Feb 4 18:42 libipt_NETMAP.so
-rwxr-xr-x 1 root root 3016 Feb 18 2005 libipt_NOTRACK.so
-rwxr-xr-x 1 root root 11416 Feb 4 18:42 libipt_owner.so
-rwxr-xr-x 1 root root 6432 Feb 18 2005 libipt_physdev.so
-rwxr-xr-x 1 root root 5224 Feb 18 2005 libipt_pkttype.so
-rwxr-xr-x 1 root root 14256 Feb 4 18:42 libipt_policy.so
-rwxr-xr-x 1 root root 11599 Feb 4 18:42 libipt_realm.so
-rwxr-xr-x 1 root root 12659 Feb 4 18:42 libipt_recent.so
-rwxr-xr-x 1 root root 9513 Feb 4 18:42 libipt_REDIRECT.so
-rwxr-xr-x 1 root root 11034 Feb 4 18:42 libipt_REJECT.so
-rwxr-xr-x 1 root root 7256 Feb 18 2005 libipt_rpc.so
-rwxr-xr-x 1 root root 10083 Feb 4 18:42 libipt_SAME.so
-rwxr-xr-x 1 root root 11352 Feb 18 2005 libipt_sctp.so
-rwxr-xr-x 1 root root 10976 Feb 4 18:42 libipt_SNAT.so
-rwxr-xr-x 1 root root 3088 Feb 18 2005 libipt_standard.so
-rwxr-xr-x 1 root root 4960 Feb 18 2005 libipt_state.so
-rwxr-xr-x 1 root root 3248 Feb 18 2005 libipt_TARPIT.so
-rwxr-xr-x 1 root root 4960 Feb 18 2005 libipt_tcpmss.so
-rwxr-xr-x 1 root root 4320 Feb 18 2005 libipt_TCPMSS.so
-rwxr-xr-x 1 root root 8888 Feb 18 2005 libipt_tcp.so
-rwxr-xr-x 1 root root 10078 Feb 4 18:42 libipt_tos.so
-rwxr-xr-x 1 root root 9567 Feb 4 18:42 libipt_TOS.so
-rwxr-xr-x 1 root root 3016 Feb 18 2005 libipt_TRACE.so
-rwxr-xr-x 1 root root 9477 Feb 4 18:42 libipt_ttl.so
-rwxr-xr-x 1 root root 9403 Feb 4 18:42 libipt_TTL.so
-rwxr-xr-x 1 root root 6424 Feb 18 2005 libipt_udp.so
-rwxr-xr-x 1 root root 10745 Feb 4 18:42 libipt_ULOG.so
-rwxr-xr-x 1 root root 6981 Feb 4 18:42 libipt_unclean.so
-rwxr-xr-x 1 root root 9526 Feb 4 18:42 libxt_CLASSIFY.so
-rwxr-xr-x 1 root root 9664 Feb 4 18:42 libxt_comment.so
-rwxr-xr-x 1 root root 10903 Feb 4 18:42 libxt_connbytes.so
-rwxr-xr-x 1 root root 10792 Feb 4 18:42 libxt_connlimit.so
-rwxr-xr-x 1 root root 9723 Feb 4 18:42 libxt_connmark.so
-rwxr-xr-x 1 root root 10479 Feb 4 18:42 libxt_CONNMARK.so
-rwxr-xr-x 1 root root 14549 Feb 4 18:42 libxt_dccp.so
-rwxr-xr-x 1 root root 11474 Feb 4 18:42 libxt_dscp.so
-rwxr-xr-x 1 root root 10835 Feb 4 18:42 libxt_DSCP.so
-rwxr-xr-x 1 root root 10269 Feb 4 18:42 libxt_esp.so
-rwxr-xr-x 1 root root 15015 Feb 4 18:42 libxt_hashlimit.so
-rwxr-xr-x 1 root root 9570 Feb 4 18:42 libxt_helper.so
-rwxr-xr-x 1 root root 10008 Feb 4 18:42 libxt_length.so
-rwxr-xr-x 1 root root 10756 Feb 4 18:42 libxt_limit.so
-rwxr-xr-x 1 root root 9720 Feb 4 18:42 libxt_mac.so
-rwxr-xr-x 1 root root 9687 Feb 4 18:42 libxt_mark.so
-rwxr-xr-x 1 root root 10229 Feb 4 18:42 libxt_MARK.so
-rwxr-xr-x 1 root root 15868 Feb 4 18:42 libxt_multiport.so
-rwxr-xr-x 1 root root 10637 Feb 4 18:42 libxt_NFLOG.so
-rwxr-xr-x 1 root root 9544 Feb 4 18:42 libxt_NFQUEUE.so
-rwxr-xr-x 1 root root 7286 Feb 4 18:42 libxt_NOTRACK.so
-rwxr-xr-x 1 root root 10495 Feb 4 18:42 libxt_physdev.so
-rwxr-xr-x 1 root root 10143 Feb 4 18:42 libxt_pkttype.so
-rwxr-xr-x 1 root root 9579 Feb 4 18:42 libxt_quota.so
-rwxr-xr-x 1 root root 16848 Feb 4 18:42 libxt_sctp.so
-rwxr-xr-x 1 root root 7323 Feb 4 18:42 libxt_standard.so
-rwxr-xr-x 1 root root 10056 Feb 4 18:42 libxt_state.so
-rwxr-xr-x 1 root root 10539 Feb 4 18:42 libxt_statistic.so
-rwxr-xr-x 1 root root 12947 Feb 4 18:42 libxt_string.so
-rwxr-xr-x 1 root root 10046 Feb 4 18:42 libxt_tcpmss.so
-rwxr-xr-x 1 root root 9683 Feb 4 18:42 libxt_TCPMSS.so
-rwxr-xr-x 1 root root 14681 Feb 4 18:42 libxt_tcp.so
-rwxr-xr-x 1 root root 15751 Feb 4 18:42 libxt_time.so
-rwxr-xr-x 1 root root 7276 Feb 4 18:42 libxt_TRACE.so
-rwxr-xr-x 1 root root 11300 Feb 4 18:42 libxt_u32.so
-rwxr-xr-x 1 root root 11291 Feb 4 18:42 libxt_udp.so
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
