search for: ip_conntrack_tftp

...n fw ACCEPT net all DROP info all all REJECT info This is the modules file: loadmodule ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp loadmodule ip_conntrack_tftp loadmodule ip_conntrack_irc loadmodule ip_conntrack_h323 loadmodule iptable_nat loadmodule ip_nat_ftp loadmodule ip_nat_tftp loadmodule ip_nat_irc loadmodule ip_nat_h323 We are running the kernel-2.6.3-15mdk with shorewall-2.0.3a-1mdk. And lsmod | grep ip shows this:...

Hi, I have a setup where the tftp server is inside the firewall. Now the issue is tftp client send request on dynamic udp port. Can anyone give some idea, how i can bind the fixed port for client udp requests ? Otherwise i hope, it is not a solution that i will open all port related to UDP in the firewall. Regards, lingu -------------- next part -------------- An HTML attachment was scrubbed...

...ort 2304 0 ipt_conntrack 2560 0 iptable_mangle 2688 0 ip_nat_irc 4080 0 ip_nat_tftp 3280 0 ip_nat_ftp 4720 0 iptable_nat 21156 4 ipt_SAME,ip_nat_irc,ip_nat_tftp,ip_nat_ftp ip_conntrack_irc 71060 1 ip_nat_irc ip_conntrack_tftp 3476 0 ip_conntrack_ftp 71444 1 ip_nat_ftp ip_conntrack 29088 10 ipt_SAME,ipt_state,ipt_conntrack,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp iptable_filter 2816 1 ip_tables 16272 8 ipt_SAME,ipt_...

Christian, make sure your domU Kernel Modules under /lib/modules/<KernelVersion> have the same vermagic and modversion as your domU Kernel ! Or try loading the ipt_filter module manually with "modprobe -f" also see "man modprobe" Regards, Markus -----Ursprüngliche Nachricht----- Von: xen-users-bounces@lists.xensource.com [mailto:xen-users-bounces@lists.xensource.com] Im

...I added this line to /etc/shorewall/modules loadmodule ipt_tcpmss so my modules file looks like this now: loadmodule ip_tables loadmodule iptable_filter loadmodule ipt_tcpmss # This one I added loadmodule ip_conntrack loadmodule ip_conntrack_ftp loadmodule ip_conntrack_tftp loadmodule ip_conntrack_irc loadmodule iptable_nat loadmodule ip_nat_ftp loadmodule ip_nat_tftp loadmodule ip_nat_irc Restarted shorewall, but to no effect at all. Now, It may be that I loaded the module to soon, or too late (maybe a diferent placement on the load modules list)...

We have a (supposedly) quite standard setup: 2 Dom0 with drbd-on-lvm and a bunch of DomU, on Quad Xeon Dell servers. We tried with both sid-based and etch-based (+ 3.1 xen hypervisor and drbd 8 from backports.org ) Dom0, and quite consistently have "kernel: invalid opcode: 0000 [1] SMP" errors which freezes Dom0 (during lasts tests a simple start-and-stop loop of 10 DomU can trigger

I recently did a set up where I replaced a simple D-link home router that was having trouble processing a T1's worth of bandwidth with a linux machine running iptables. the kernel was 2.6.29-r5 and I chose the SIP connection tracking modules from the menuconfig. Router worked fine for normal traffic, but I was unable to get the SIP phones to work. Using ngrep it was plain to see

Hello, I run Shorewall 2.0.3a backport on a debian woody box (with 2.4.18 homemade kernel). When I start shorewall I got the following errors. Oct 30 11:13:12 fwr modprobe: modprobe: Can''t locate module ipt_conntrack Oct 30 11:13:17 fwr modprobe: modprobe: Can''t locate module ipt_pkttype Oct 30 11:13:18 fwr modprobe: modprobe: Can''t locate module ipt_pkttype Oct 30

I''m very new to shorewall. My setup is IP Gateway (CentOS 4 + Shorewall) with 3 NIC cards. Shorewall works great on the firewall machine. Bind also works (local net machines get IPs fine). Under firestarter, all works great. With shorewall, the loc machines can not route past the firewall. They can connect to the firewall, but not past it. Exactly what information should I post to get

...ipt_LOG ipt_state ipt_pkttype ipt_set ipt_CONNMARK ipt_MARK ipt_ROUTE ipt_connmark ipt_owner ipt_recent ipt_iprange ipt_physdev ipt_multiport ipt_conntrack iptable_mangle ip_set_portmap ip_set_macipmap ip_set_ipmap ip_set_iphash ip_set ip_nat_irc ip_nat_tftp ip_nat_ftp iptable_nat ip_conntrack_irc ip_conntrack_tftp ip_conntrack_ftp ip_conntrack iptable_filter ip_tables 8139too mii af_packet ide_cd loop ext3 jbd nls_iso8859_1 nls_cp850 vfat fat intel_agp nvram amd64_agp agpgart evdev bttv video_buf firmware_class i2c_algo_bit v4l2_common btcx_risc tveeprom i2c_core videodev dm_mod sata_vsc sata_via sata_svw sa...

...T LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE MODULES: ---------------------------------------------------------------------------- ------------------ # loadmodule ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp loadmodule ip_conntrack_tftp loadmodule ip_conntrack_irc loadmodule iptable_nat loadmodule ip_nat_ftp loadmodule ip_nat_tftp loadmodule ip_nat_irc NAT: ---------------------------------------------------------------------------- ------------------ #EXTERNAL INTERFACE INTERNAL ALL LOCAL # INTERFACES #...

...pt_MASQUERADE 3968 1 ipt_REJECT 6528 4 ipt_LOG 6272 10 ipt_TCPMSS 4480 1 ipt_state 2304 16 ipt_pkttype 2048 4 ipt_recent 10252 0 ipt_iprange 2048 0 ipt_physdev 2320 0 ipt_multiport 2304 2 ipt_conntrack 2816 0 ip_nat_irc 4464 0 ip_nat_tftp 3696 0 ip_nat_ftp 4976 0 ip_conntrack_irc 71600 1 ip_nat_irc ip_conntrack_tftp 3888 0 ip_conntrack_ftp 72240 1 ip_nat_ftp ip_conntrack 32520 10 ipt_MASQUERADE,ipt_state,ipt_conntrack,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,ipt able_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp ip_tables 16896 14 ipt_MASQUERADE,ipt_REJECT,ipt_LOG,ipt_TCPMSS,ipt_state,ipt_pkttype,ipt_recen...

...80 0 ip_set_ipmap 3872 0 ip_set_iphash 5924 0 ip_set 18876 8 ip_set_portmap,ip_set_macipmap,ip_set_ipmap,ip_set_iphash ip_nat_irc 1824 0 ip_nat_tftp 1216 0 ip_nat_ftp 2560 0 ip_conntrack_irc 70352 1 ip_nat_irc ip_conntrack_tftp 3088 1 ip_nat_tftp ip_conntrack_ftp 71408 1 ip_nat_ftp ip_conntrack 40824 10 ipt_MASQUERADE,ipt_state,ipt_conntrack,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp ip_tables 20416 18 ipt_MASQUERADE,ipt_REJECT...

I have problems connecting IPSEC VPN clients on the masqueraded network to outside VPN servers. It looks like this: ipsec-user | 192.168.1.10 (DHCP assigned) | | 192.168.1.1 fw-1 (shorewall, Linux 2.6) | 20.20.20.20 (internet) | 30.30.30.30 fw-2 (IPSEC VPN endpoint) | 192.168.100.1 | | 192.168.100.2 server ipsec-user (a road warrior) is supposed to create an IPSEC tunnel to his home

...#39; '']'' ++ loadmodule ip_conntrack ++ local modulename=ip_conntrack ++ local modulefile ++ local suffix ++ moduleloader=modprobe ++ qt which modprobe ++ which modprobe +++ lsmod +++ grep ip_conntrack ++ ''['' -z ''ip_conntrack_irc 72976 1 ip_nat_irc ip_conntrack_tftp 4496 1 ip_nat_tftp ip_conntrack_ftp 74000 1 ip_nat_ftp ip_conntrack 44760 10 ipt_MASQUERADE,ipt_conntrack,ipt_state,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp'' '']'' ++ loadmodule ip_conntrack_f...

Hi folks, Has anyone tested the changes to multiple ISPs/load balancing or routestopped in 2.4.0-RC1 yet? We need to talk about what criteria we will use for determining whether 2.4.0 is ready for release. I''ve started configuring a firewall at work with the multiple ISPs support, but its kernel doesn''t have connection marking support, so it''s going to be a couple of

I have had a web server listining sql-1433, www 80, ftp-21 using proxy arp with sub-netting in a three interface DMZ. All these ports are in the rules file as ACCEPT. With one exeception that 1433 allows a few host from the net. 21 and 80 allow all net to dmz connections. The policy is DMZ to net ACCEPT This has been working great for about a month or more until I rebooted the

I am getting the following message when Shorewall stops can anybody shed any light on this message and where I should be looking? Thanks root@bobshost:~# shorewall stop Loading /usr/share/shorewall/functions... Processing /etc/shorewall/params ... Processing /etc/shorewall/shorewall.conf... Loading Modules... Stopping Shorewall...Processing /etc/shorewall/stop ... IP Forwarding Enabled

Hi, I recently subscribed to xen-users asking about a powernow-k8 problem, but in the meantime I am not sure if the users-list was the right place for it. So I decided to repeat my question here ;-) My current config is attached. --- snip --- Hi, I recently installed Xen on my AMD64 for my first time and so far, everything seems to work pretty fine. :-) I tried to enable cpu frequency

Hello, Let me first start by saying Shorewall is awesome, and I use it everywhere from single box firewall, to home network firewall, even to our corporate firewall. I am experiencing a problem getting my home firewall to work with my BroadVoice VoIP connection. I use the Sipura SPA-2100 ATA (Analog Telephone Adapter) that came with my BroadVoice account. This happened when I tried to replace