> > > >>>> -----BEGIN PGP SIGNED MESSAGE----- >>>> Hash: SHA256 >>>> >>>> On 10/28/2016 12:11 PM, Ryan Joiner wrote: >>>> >>>>> What would be the command to disable them for CentOS7? I have >>>>> searched a bunch but couldn't find anything. >>>> a) rmmod nf_nat_sip >>>> rmmod nf_conntrack_sip >>>> a) Set AUTOHELPERS=No in shorewall.conf. >>>> b) Set HELPERS in shorewall.conf to the list of helpers you actually >>>> want. >>>> c) Use standard macros for rules in the rules file that require a >>>> helper, such as ftp. >>>> >>>>> Do the modules exist as a native part of CentOS, or is that added >>>>> in by Shorewall (Sorry for dumb question)? >>>>> >>>> They are a native part of Centos -- Shorewall never installs kernel >>>> modules. >>>> >>>> - -Tom >>>> - -- >>>> Tom Eastep \ When I die, I want to go like my Grandfather who >>>> Shoreline, \ died peacefully in his sleep. Not screaming like >>>> Washington, USA \ all of the passengers in his car >>>> http://shorewall.net \________________________________________________ >>>> >>> On 10/28/16 2:11 PM, Tom Eastep wrote: >>> >>> Hey Tom, just a heads up, on every CentOS 7 install I've done when I >>> run >>> the >>> >>> rmmod nf_nat_sip >>> rmmod nf_conntrack_sip >>> >>> it says the module does not exist. That's why I was confused. >>> >>> Am I missing something? I do the minimal install every time. >> What exactly does it say? Does it say the module is not loaded? >> >> Regards, >> Simon >> >> > > Yes exactly. It says: > rmmod: ERROR: Module nf_nat_sip is not currently loaded > So far this is on every CentOS7 install I have done. I install and > configure Shorewall via RPM just like I did on CentOS 6 before.
So it means nf_nat_sip doesn't get loaded by your current shorewall config, but be assured it's installed on your CentOS 7 box - since it's part of the kernel rpm. Simon ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today. http://sdm.link/xeonphi _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
