Re: Compiling options for IPTABLES to work.

[ads nat <adsnat@xxxxxxxxx>]

Following are the modules loaded :

[root@xyz root]# /sbin/lsmod
Module                  Size  Used by    Not tainted
sr_mod                 18136   2  (autoclean)
soundcore               6532   0  (autoclean)
ipip                    8772   1  (autoclean)
autofs                 13348   0  (autoclean) (unused)
8139too                17704   2
mii                     2156   0  [8139too]
ipt_MASQUERADE          2200   1  (autoclean)
ipt_REDIRECT            1368   1  (autoclean)
iptable_nat            19960   1  (autoclean) [ipt_MASQUERADE ipt_REDIRECT]
ip_conntrack           21244   1  (autoclean) [ipt_MASQUERADE ipt_REDIRECT iptab
le_nat]
iptable_filter          2412   1  (autoclean)
ip_tables              14936   6  [ipt_MASQUERADE ipt_REDIRECT iptable_nat iptab
le_filter]
ide-scsi               10512   1
ide-cd                 33608   0
cdrom                  33696   0  [sr_mod ide-cd]
mousedev                5524   1
keybdev                 2976   0  (unused)
hid                    22244   0  (unused)
input                   5888   0  [mousedev keybdev hid]
usb-uhci               26188   0  (unused)
ehci-hcd               17480   0  (unused)
usbcore                77024   1  [hid usb-uhci ehci-hcd]
ext3                   70368   5
jbd                    52212   5  [ext3]
aic7xxx               137140   6
sd_mod                 13552  12
scsi_mod              107144   4  [sr_mod ide-scsi aic7xxx sd_mod]

Are these modules O.K. for what I want to do?

Please guide.

Thanks

Jeffrey Laramie <JALaramie@xxxxxxxxxxxxxxxxxxx> wrote:

ads nat wrote:

I want to get hands on experience of using iptables, DMZ firewall, DHCP firewall, etc.for which Tutorial says I need to compile kernal with following options OR as modules :

 

• CONFIG_NETFILTER

• CONFIG_IP_NF_CONNTRACK

• CONFIG_IP_NF_IPTABLES

• CONFIG_IP_NF_MATCH_LIMIT

• CONFIG_IP_NF_MATCH_STATE

• CONFIG_IP_NF_FILTER

• CONFIG_IP_NF_NAT

• CONFIG_IP_NF_TARGET_LOG

I have installed Redhat Linux 8.0 on server machine which by default installs iptables 1.2.6a.

Do Redhat 8.0 install all these modules. How to check whether these modules are installed or not. 

Thanks

The stock Redhat kernels load these routines as modules. Run: /sbin/lsmod to see which modules are currently loaded. Note that the module name is not going to be the exact same name as the kernel option i.e.  if kernel option CONFIG_IP_NF_CONNTRACK is loaded as a module it will be loaded as module ip_conntrack.

Jeff

---

Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software