Trouble installing netfilter/iptables (long)

Shane Chen shane@knowplace.org
Tue, 10 Jul 2001 12:23:37 -0700


"Ms. Geekgirl" wrote:
> Once I had a stable kernel, which consisted of no modules(actually turned
> off module support) and compiled as little as I thought was needed right
> into the kernel(650k). Then I started to install additional software
> that I needed.

It's probably better to compile modules support into your kernel (yes, I
know it's a firewall).  Certain parameters for the iptables modules
can't be configured unless you load it as a module.  Besides, there's no
(valid) reasons why modules are evil on a firewall.
 
> Testing... 2.4.4.patch NOT APPLIED ( 2 missing files)

If you're going to recompile anyway, you might as well be using the
latest kernel.  Having said that, I'm still running 2.4.5.  Be ware that
2.4.6's UNCLEAN code has bugs.

See http://knowplace.org/netfilter/ipt_compile.html for compile hints.

Shane