search for: ip_conntrack_irc

...------------------------------- Status|NEW |RESOLVED Resolution| |WORKSFORME ------- Additional Comments From laforge@netfilter.org 2003-02-16 21:28 ------- I cannot reproduce the problem described. Calling 'modprobe ip_conntrack_irc ports=1,2,3,4,5,6,7,8,9' gives the correct error: /lib/modules/2.4.20/kernel/net/ipv4/netfilter/ip_conntrack_irc.o: too many values for ports (max 8) The ip_conntrack_irc code tells the core kernel module system that it supports a 'ports' parameter with up to eight integer values. Ev...

Hi! Already searched for it and asked in IRC channel but all replies talk about ip_conntrack_irc and ip_nat_irc. I have a rule in 'NEW' section of 'shorewall/rules' to irc: ACCEPT fw net tcp 6667 #IRC and 'lsmod|grep irc' shows: ip_nat_irc 3648 0 ip_nat 22572 8 [...] ip_conntrack_irc...

...an) ipt_REJECT 2712 4 (autoclean) iptable_filter 1672 1 (autoclean) ip_nat_ftp 3760 0 (unused) ip_conntrack_ftp 3616 0 [ip_nat_ftp] ip_nat_irc 3024 0 (unused) iptable_nat 19608 3 [ipt_REDIRECT ip_nat_ftp ip_nat_irc] ip_conntrack_irc 2720 0 [ip_nat_irc] ip_conntrack 21372 3 [ipt_REDIRECT ip_nat_ftp ip_conntrack_ftp ip_nat rc iptable_nat ip_conntrack_irc] keybdev 1632 0 (unused) 8139too 12904 2 mdew:~# modprobe ipt_IMQ mdew:~# tc qdisc add dev imq0 handle 1: root h...

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=101 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|trivial |enhancement Status|NEW |ASSIGNED Priority|P2

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=101 netfilter@linuxace.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter@linuxace.com ------- Additional Comments From netfilter@linuxace.com 2004-09-24 17:40 CEST ------- Actually,

./show_bug.cgi?id=101 kaber at trash.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |WONTFIX ------- Comment #3 from kaber at trash.net 2008-04-02 13:39 ------- I'd probably take a

...EPT net all DROP info all all REJECT info This is the modules file: loadmodule ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp loadmodule ip_conntrack_tftp loadmodule ip_conntrack_irc loadmodule ip_conntrack_h323 loadmodule iptable_nat loadmodule ip_nat_ftp loadmodule ip_nat_tftp loadmodule ip_nat_irc loadmodule ip_nat_h323 We are running the kernel-2.6.3-15mdk with shorewall-2.0.3a-1mdk. And lsmod | grep ip shows this: ip_nat_h323 4128 0...

...IRC DCC=20 request, a single connection from the outside network to the port number stated in the DCC request on any (internal) IP adddres will get accepted. SOLUTION - -------- Update to a >=3D 2.4.18-pre9 kernel OR apply the following patch: - --- linux-2.4.18-pre8-plain/net/ipv4/netfilter/ip_conntrack_irc.c Sat Dec= 22 18:52:16 2001 +++ linux-2.4.18-pre8-nfpom/net/ipv4/netfilter/ip_conntrack_irc.c Tue Feb = 5 15:55:29 2002 @@ -1,8 +1,8 @@ - -/* IRC extension for IP connection tracking, Version 1.20 - - * (C) 2000-2001 by Harald Welte <laforge@gnumonks.org> +/* IRC extension for IP connection...

...ipt_state 2176 2 ipt_multiport 2304 0 ipt_conntrack 2560 0 iptable_mangle 2688 0 ip_nat_irc 4080 0 ip_nat_tftp 3280 0 ip_nat_ftp 4720 0 iptable_nat 21156 4 ipt_SAME,ip_nat_irc,ip_nat_tftp,ip_nat_ftp ip_conntrack_irc 71060 1 ip_nat_irc ip_conntrack_tftp 3476 0 ip_conntrack_ftp 71444 1 ip_nat_ftp ip_conntrack 29088 10 ipt_SAME,ipt_state,ipt_conntrack,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp iptable_filter 2816 1 ip...

...ECT ipt_MASQUERADE ip_nat_irc ip_nat_ftp] ip_tables 10528 22 [ipt_ULOG iptable_mangle ipt_ttl ipt_tos ipt_tcpmss ipt_multiport ipt_mark ipt_mac ipt_state ipt_limit ipt_unclean iptable_filter ipt_length ipt_TOS ipt_TCPMSS ipt_REJECT ipt_REDIRECT ipt_MASQUERADE ipt_LOG iptable_nat] ip_conntrack_irc 2464 0 (unused) ip_conntrack_ftp 3232 0 (unused) ip_conntrack 12820 4 [ipt_state ipt_REDIRECT ipt_MASQUERADE ip_nat_irc ip_nat_ftp iptable_nat ip_conntrack_irc ip_conntrack_ftp] rtc 5528 0 (autoclean) Thanks -- guy

Christian, make sure your domU Kernel Modules under /lib/modules/<KernelVersion> have the same vermagic and modversion as your domU Kernel ! Or try loading the ipt_filter module manually with "modprobe -f" also see "man modprobe" Regards, Markus -----Ursprüngliche Nachricht----- Von: xen-users-bounces@lists.xensource.com [mailto:xen-users-bounces@lists.xensource.com] Im

...z "` $LSMOD | $GREP ip_conntrack_ftp | $AWK {'print $1'} `" ]; then $INSMOD ip_conntrack_ftp fi #Load the IRC tracking mechanism for full IRC tracking # # Enabled by default -- insert a "#" on the next line to deactivate # echo -en " ip_conntrack_irc, " # #Verify the module isn't loaded. If it is, skip it # if [ -z "` $LSMOD | $GREP ip_conntrack_irc | $AWK {'print $1'} `" ]; then $INSMOD ip_conntrack_irc fi #Load the general IPTABLES NAT code - "iptable_nat" # - Loaded automatically when MASQ function...

-- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key

..._REJECT 3736 4 (autoclean) ipt_TCPMSS 3064 1 (autoclean) ipt_state 1080 55 (autoclean) iptable_mangle 2808 1 (autoclean) iptable_nat 19992 1 (autoclean) [ipt_MASQUERADE ipt_REDIRECT] ip_conntrack_ftp 5120 0 (unused) ip_conntrack_irc 3552 0 (unused) ip_conntrack 21276 5 [ipt_MASQUERADE ipt_REDIRECT ipt_state iptable _nat ip_conntrack_ftp ip_conntrack_irc] 3c59x 30832 3 iptable_filter 2444 1 (autoclean) ip_tables 14968 13 [ipt_TOS ipt_MASQUERADE ipt_REDIRECT ip...

Hi, ok Im all new to this :-) for pasv ftp in your example you say for example to use ports 65500-65535, but i dont see that u open those ports in your example fw scripts..? any hints ? -- Christophe Zwecker mail: doc@zwecker.de Hamburg, Germany fon: +49 179 3994867 http://www.zwecker.de "Who is General Failure ? And why is he reading my disk

...and /etc/modules.conf according the FTP section of this page http://shorewall.sourceforge.net/ports.htm Here''s the contents of /etc/shorewall/modules ------------- loadmodule ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp ports=21,23000 loadmodule ip_conntrack_irc loadmodule iptable_nat loadmodule ip_nat_ftp ports=21,23000 loadmodule ip_nat_irc --------------- Here''s the contents of /etc/modules.conf ------------- alias eth2 3c59x alias eth1 3c59x alias eth0 3c59x options ip_conntrack_ftp ports=21,23000 options ip_nat_ftp ports=21,23000 ----------...

...4-stronger # FWVER=0.81s # An example of a stronger IPTABLES firewall with IP Masquerade # support for 2.6.x kernels. # # Log: # # 0.81s - Added some mangled and ip2route rules # 0.80s - Added a DISABLED ip_nat_irc kernel module section, changed the # default of the ip_conntrack_irc to NOT load by default, and # added additional kernel module comments # 0.79s - ruleset now uses modprobe instead of insmod # 0.78s - REJECT is not a legal policy yet; back to DROP # 0.77s - Changed the default block behavior to REJECT not DROP # 0.76s - Added a comment about the...

...-- INET2_IF - external interface no. 2 INET2_IP - external IP no. 2 INET2_NET - external network/mask no. 2 INET2_GW - remote gateway no. 2 #------------------------------ echo "1" > /proc/sys/net/ipv4/ip_forward /sbin/modprobe ip_conntrack_ftp /sbin/modprobe ip_nat_ftp /sbin/modprobe ip_conntrack_irc /sbin/modprobe ip_nat_irc IPTABLES=/usr/sbin/iptables $IPTABLES -t filter -P INPUT ACCEPT $IPTABLES -t filter -P OUTPUT ACCEPT $IPTABLES -t filter -P FORWARD ACCEPT $IPTABLES -t nat -P PREROUTING ACCEPT $IPTABLES -t nat -P POSTROUTING ACCEPT $IPTABLES -t nat -P OUTPUT ACCEPT $IPTABLES -t mangle -...

...n) ipt_REJECT 3040 4 (autoclean) ipt_state 608 41 (autoclean) iptable_mangle 2208 1 (autoclean) ip_nat_irc 2240 0 (unused) ip_nat_ftp 2848 0 (unused) iptable_nat 15380 3 [ipt_MASQUERADE ip_nat_irc ip_nat_ftp] ip_conntrack_irc 2976 1 ip_conntrack_ftp 3744 1 ip_conntrack 16628 4 [ipt_MASQUERADE ipt_state ip_nat_irc ip_nat_ftp iptable_nat ip_conntrack_irc ip_conntrack_ftp] iptable_filter 1728 1 (autoclean) ip_tables 10400 11 [ipt_ULOG ipt_TOS ipt_MASQUERADE ipt_LO...

...############################################################## # Shorewall 1.3 /etc/shorewall/modules # # This file loads the modules needed by the firewall. loadmodule ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp ports=21,20 loadmodule ip_conntrack_irc loadmodule iptable_nat loadmodule ip_nat_ftp ports=21,20 loadmodule ip_nat_irc --------------------------------- Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software