Re: Trouble with PPTP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2003-10-22 at 09:38, Andrzej Kozak wrote:
> Thanks Phil,
> Is better but not excellent.
> After when I :
> Patched kernel (pptp-conntrack-nat from p-o-m)
> Recompiled iptables v 1.2.8
> Recompiled kernel
> i get the same message: iptables: Invalid argument
> but only if firewall script is automated executing from
> /etc/rc.boot/firewallscript (DEBIAN 3.0 distribution) when linux is
> booting or rebooting.
> If I log into system and executing this script manually is everything
> OK !
> What is wrong ? 
>  
> best regards
> Andrew Kozak
>  
>  
> > Rebuild iptables userspace using the patched kernel for the headers.
> >
> > Phil Oester
> >
> > On Wed, Oct 15, 2003 at 03:46:49PM +0200, Andrzej Kozak wrote:
> > > Hello!
> > > When I patched my 2.4.22 kernel with pptp-conntrack-nat -DNAT and
> -SNAT
> is broken if I use iptables with -t nat
> > > I get message: iptables: Invalid argument
> > > Iptables v. 1.2.8
> > > I need establish connect from my security network to outside VPN
> server.
> > >
> > > best regards
> > >
> > > Andrew Kozak

1. make sure your /usr/src/linux link points to the correct linux kernel
source. I dont think this is the problem, just verify this.

2. it sounds like you've got iptables installed in 2 seperate locations.
the older version (compiled against old kernel) is hardcoded or picked
up by the init scripts but when you log in, your $PATH picks up the
newer one (compiled against correct kernel).

I think this is what your problem is.

"locate iptables | grep bin" should identify this problem very quickly.
If not, then you need to dig into the /etc/init.d script that is used on
botup and see where its picking up its iptables from. "which iptables"
should tell you where your login copy is coming from.

HTH,

-- 

Ranjeet Shetye
Senior Software Engineer
Zultys Technologies
Ranjeet dot Shetye2 at Zultys dot com
http://www.zultys.com/
 
The views, opinions, and judgements expressed in this message are solely
those of the author. The message contents have not been reviewed or
approved by Zultys.




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux