|
Hello All,
I am new to this list so please forgive me if I
"faux paus".
I am running kernel version 2.4.20 (from the kernel
archives) with the following netfilter options:
Connection Tracking, FTP Protocol Support, IPTables
Support, & NAT of local connections (order of appearance in 'make
menuconfig') compiled statically into the kernel with all other options, execpt
for IRC Protocol support (not compiled at all) compiled as modules.
whenever I do an 'insmod ip_nat_ftp' I get the following error:
Using
/lib/modules/2.4.20/kernel/net/ipv4/netfilter/ip_nat_ftp.o
/lib/modules/2.4.20/kernel/net/ipv4/netfilter/ip_nat_ftp.o: init_module: Device or resource busy Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters. You may find more information in syslog or the output from dmesg When I check /var/log/messages I see:
modprobe: modprobe: Can't locate module
ip_conntrack_ftp
kernel: unable to load module ip_conntrack_ftp kernel: ip_nat_ftp: error registering helper for port 21 When I do an 'ls' on
'/lib/modules/2.4.20/kernel/net/ipv4/netfilter' I see the 'ip_nat_ftp.o' module
but not the 'ip_conntrack_ftp.o' module. I am ssuming this is normal because I
compiled the 'FTP Protocol Support' (CONFIG_IP_NF_FTP) into the kernal as
apposed to a module.
I am assuming that the above errors are a
result of the ip_nat_ftp module not being able to locate the ip_conntrack_ftp
module which is statically built into the kernel. I didn't get any errors
when I compiled the kernel so I am assuming it (ip_conntrack_ftp) compiled
properly into the kernel. What I need to know is:
a) How can I tell if the ip_conntrack_ftp
compiled statically into the kernel is working?
b) How can I load the ip_nat_ftp module without
getting the errors? Do I have to tell it that ip_conntrack_ftp module is built
into the kernel?
c) Do I have to somehow "activate" the
ip_conntrack_ftp module now that it is built statically into the
kernel?
D) Is there anyplace, in the /proc file system
perhaps, that I can see any information regarding the ip_conntrack_ftp &
ip_nat_ftp modules/functions?
I do not want to recompile unless I absolutely have
to because this is a production firewall system. Any help regarding this matter
would be greatly appreciated. Thanks in advance.
®odre
|
