Magnus, Thanks - found in patch-o-matic on my RH7.3 system after some grief... when you do a: ./runme extra KERNEL_DIR=/usr/src/linux -2.4.20 it barfs with an error saying "ERROR: invalid arg KERNEL_DIR" and when you don't supply a KERNEL_DIR it barfs with "missing KERNEL_DIR", so I hacked the 'runme' bash script adding: KERNEL_DIR="/usr/src/linux-2.4.20" near the top and then did: ./runme extra and found it okay... patch applied cleanly to 2.4.20 and is currently compiling... will test TFTP NAT shortly... Thanks the for the prompt reply :-) Mike ----- Original Message ----- From: "Magnus Boden" <sarek@ozaba.cx> To: "Michael J. Tubby B.Sc. (Hons) G8TIC" <mike@thorcom.com> Cc: <netfilter@lists.netfilter.org> Sent: Sunday, January 26, 2003 8:31 PM Subject: Re: NAT of TFTP sessions > Hello, > > It is in the patch-o-matic which has been split from > iptables-x.x.x.tar.bz2 file. Download > http://www.netfilter.org/files/patch-o-matic-20020825.tar.bz2 > and it is in there. > > Regards > Magnus > > Michael J. Tubby B.Sc. (Hons) G8TIC wrote: > > Magnus et al, > > > > I have several Linux firewall/gateway machines dotted around the > > UK and Europe which are basically RedHat 7.3 + Kernet 2.4.20 > > + iptables 1.2.7a. > > > > We have things on the inside like Cisco VoIP phones, print servers, > > etc. that need to be able to TFTP code or configs in from a > > server on the outside (public internet). > > > > TFTP appears not to work and when I search google I find > > information which refers to patches to "oldnat" but not to "newnat". > > > > Is there something that I am missing? Is there a configuiration > > module, helper, patch or something for iptables 1.2.7a which will > > fix this? > > > > Mike > > > > > > > > > > > > >