CentOS - Jun 2015 - Using a CentOS 6 Machine as a gateway/router/home server

On Sun, 28 Jun 2015, John R Pierce wrote:
> On 6/28/2015 3:49 PM, Max Pyziur wrote:
>>  I also seem to need to load
>>  iptable_nat
>>  nf_nat_ftp
>>
>>  via rc.local
>>
>>  Is this correct? 
>
> only if you're running some Linux build from the 1990s.
>
> nothing on RHEL/CentOS should need anything in rc.local

Then what is the appropriate way to ensure that these modules are loaded?

Should they be placed in the /etc/init.d/iptables script?
IPTABLES_MODULES="iptable_nat ip_nat_ftp ip_conntrack
ip_conntrack_ftp"

or somewhere else?

Thanks

Max

On 29/06/2015 16:59, Max Pyziur wrote:
> On Sun, 28 Jun 2015, John R Pierce wrote:
>
>> On 6/28/2015 3:49 PM, Max Pyziur wrote:
>>>  I also seem to need to load
>>>  iptable_nat
>>>  nf_nat_ftp
>>>
>>>  via rc.local
>>>
>>>  Is this correct?
>>
>> only if you're running some Linux build from the 1990s.
>>
>> nothing on RHEL/CentOS should need anything in rc.local
>
>
> Then what is the appropriate way to ensure that these modules are loaded?
>
> Should they be placed in the /etc/init.d/iptables script?
> IPTABLES_MODULES="iptable_nat ip_nat_ftp ip_conntrack
ip_conntrack_ftp"
>
> or somewhere else?
>
> Thanks
>
> Max
It should do it automatically for you. Try it. Editing system init 
scripts is rarely recommended.

Tris





*************************************************************
This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity 
to whom they are addressed. If you have received this email 
in error please notify postmaster at bgfl.org

The views expressed within this email are those of the 
individual, and not necessarily those of the organisation
*************************************************************

On Mon, 29 Jun 2015, Tris Hoar wrote:
> On 29/06/2015 16:59, Max Pyziur wrote:
>>  On Sun, 28 Jun 2015, John R Pierce wrote:
>> 
>> >  On 6/28/2015 3:49 PM, Max Pyziur wrote:
>> > >   I also seem to need to load
>> > >   iptable_nat
>> > >   nf_nat_ftp
>> > > 
>> > >   via rc.local
>> > > 
>> > >   Is this correct?
>> > 
>> >  only if you're running some Linux build from the 1990s.
>> > 
>> >  nothing on RHEL/CentOS should need anything in rc.local
>> 
>>
>>  Then what is the appropriate way to ensure that these modules are
loaded?
>>
>>  Should they be placed in the /etc/init.d/iptables script?
>>  IPTABLES_MODULES="iptable_nat ip_nat_ftp ip_conntrack
ip_conntrack_ftp"
>>
>>  or somewhere else?
>>
>>  Thanks
>>
>>  Max
>
> It should do it automatically for you. Try it. Editing system init scripts
is
> rarely recommended.
It worked.

There are a lot of website guides to Linux homenetworking, some going back 
as far as tldp days (late 1990s, early 2000s). Understandably, there is no 
one that presents itself as being authoritative.

Rebuilding a CentOS box is an occasional endeavour, not a weekly one. So 
the reliance is on the informational sources that are there (some of which 
do recommend hacking rc.local or /etc/init.d/iptables), memory, and 
trial-and-error (typos and misspecified NICs can become time-sinks).

> Tris

Max