Re: [fw-wiz] Red Hat 7.1 and Iptables

From: Peter Lukas (plukasat_private)
Date: Mon Jun 11 2001 - 12:14:03 PDT

  • Next message: Keith.Morgan: "[fw-wiz] ipchains * static nat * FTP"

    You need to load the iptables modules.  On a stock 7.1 install,
    
    # modprobe ip_tables
    
    Will do.  An 'insmod ip_tables' will also work.  Other modules are located
    in /lib/modules/2.4.2-2/kernel/net/ipv4/netfilter.  RedHat's init will
    look for your pre-defined rules in /etc/sysconfig/iptables.
    
    You may also wish to remove the ipchains package entirely:
    
    # rpm -e ipchains
    
    Peter Lukas
    
    On 11 Jun 2001, Martin Peikert wrote:
    
    > Bill Asher <basher@schultz-design.com> wrote:
    >   > I'm running RedHat 7.1, kernel 2.4.2-2.  Does anyone know how to enable
    >   > iptables instead of the default ipchains.
    >   >
    >   > I am trying to set up a firewall for a small business network 2 nics,
    >   > eth0-internet, eth1 - LAN.  I'd like to begin using iptables,but am unsure
    >   > how to enable iptables.  If I run command:
    >   >
    >   > iptables -L
    >   >
    >   > I get:
    >   >
    >   > /lib/modules/2.4.2-2/kernel/net/ipv4/netfilter/ip_tables.o: init_module:
    >   > Device or resource busy
    >   > Hint: insmod errors can be caused by incorrect module parameters, including
    >   > invalid IO or IRQ parameters
    >   > /lib/modules/2.4.2-2/kernel/net/ipv4/netfilter/ip_tables.o: insmod
    >   > /lib/modules/2.4.2-2/kernel/net/ipv4/netfilter/ip_tables.o failed
    >   > /lib/modules/2.4.2-2/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables
    >   > failed
    >   > iptables v1.2.1a: can't initialize iptables table `nat': iptables who? (do
    >   > you need to insmod?)
    >   > Perhaps iptables or your kernel needs to be upgraded.
    >     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    >
    > Did you build your own kernel? If not, it would be better to do that now
    > - and don't forget to enable iptables (at least as a module).
    >
    > HTH
    > Martin
    > --
    > martin.peikertat_private
    > project manager                                          innominate AG
    > dipl.-math.                                  http://www.innominate.com
    > tel: +49-30-308806-0 fax: -77   gpg: http://innominate.org/gpg/mpe.gpg
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizardsat_private
    > http://www.nfr.com/mailman/listinfo/firewall-wizards
    >
    
    
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizardsat_private
    http://www.nfr.com/mailman/listinfo/firewall-wizards
    



    This archive was generated by hypermail 2b30 : Tue Jun 12 2001 - 09:44:26 PDT