search for: ip_nat_irc

...728 0 (autoclean) ipt_MARK 728 2 (autoclean) iptable_mangle 2100 1 (autoclean) ipt_REJECT 2712 4 (autoclean) iptable_filter 1672 1 (autoclean) ip_nat_ftp 3760 0 (unused) ip_conntrack_ftp 3616 0 [ip_nat_ftp] ip_nat_irc 3024 0 (unused) iptable_nat 19608 3 [ipt_REDIRECT ip_nat_ftp ip_nat_irc] ip_conntrack_irc 2720 0 [ip_nat_irc] ip_conntrack 21372 3 [ipt_REDIRECT ip_nat_ftp ip_conntrack_ftp ip_nat rc iptable_nat ip_conntrack_irc] keybdev 1632...

Hi! Already searched for it and asked in IRC channel but all replies talk about ip_conntrack_irc and ip_nat_irc. I have a rule in 'NEW' section of 'shorewall/rules' to irc: ACCEPT fw net tcp 6667 #IRC and 'lsmod|grep irc' shows: ip_nat_irc 3648 0 ip_nat 22572 8 [...] ip_conntrack_irc 8464 1 ip...

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=101 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|trivial |enhancement Status|NEW |ASSIGNED Priority|P2

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=101 netfilter@linuxace.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter@linuxace.com ------- Additional Comments From netfilter@linuxace.com 2004-09-24 17:40 CEST ------- Actually,

./show_bug.cgi?id=101 kaber at trash.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |WONTFIX ------- Comment #3 from kaber at trash.net 2008-04-02 13:39 ------- I'd probably take a

...module ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp loadmodule ip_conntrack_tftp loadmodule ip_conntrack_irc loadmodule ip_conntrack_h323 loadmodule iptable_nat loadmodule ip_nat_ftp loadmodule ip_nat_tftp loadmodule ip_nat_irc loadmodule ip_nat_h323 We are running the kernel-2.6.3-15mdk with shorewall-2.0.3a-1mdk. And lsmod | grep ip shows this: ip_nat_h323 4128 0 ip_conntrack_h323 4132 0 ipv6 232416 16 ipt_TOS 2240 12 ipt_MASQUERADE 3424 1 ipt_REJE...

...1:37 firewall rc.sysinit: Initializing USB controller (usb-uhci): su cceeded gen 2 14:12:11 firewall shorewall: Deleting user chains... Jan 2 14:11:37 firewall rc.sysinit: Mounting USB filesystem: succeeded gen 2 14:12:11 firewall shorewall: /lib/modules/2.4.18-19.8.0/kernel/net/ipv4/n etfilter/ip_nat_irc.o: unresolved symbol ip_nat_helper_unregister_Rb6d45e34 Jan 2 14:11:37 firewall rc.sysinit: Initializing USB HID interface: succeeded gen 2 14:12:11 firewall shorewall: /lib/modules/2.4.18-19.8.0/kernel/net/ipv4/n etfilter/ip_nat_irc.o: unresolved symbol ip_nat_delete_sack_R998453b7 Jan 2 14:11:...

...9;' + rm -f /var/lib/shorewall/shorewall.xykwKq + set +x # lsmod Module Size Used by ipt_SAME 2560 0 ipt_REJECT 5504 0 ipt_state 2176 2 ipt_multiport 2304 0 ipt_conntrack 2560 0 iptable_mangle 2688 0 ip_nat_irc 4080 0 ip_nat_tftp 3280 0 ip_nat_ftp 4720 0 iptable_nat 21156 4 ipt_SAME,ip_nat_irc,ip_nat_tftp,ip_nat_ftp ip_conntrack_irc 71060 1 ip_nat_irc ip_conntrack_tftp 3476 0 ip_conntrack_ftp 71444 1 ip_nat_ftp ip_conntrack...

Christian, make sure your domU Kernel Modules under /lib/modules/<KernelVersion> have the same vermagic and modversion as your domU Kernel ! Or try loading the ipt_filter module manually with "modprobe -f" also see "man modprobe" Regards, Markus -----Ursprüngliche Nachricht----- Von: xen-users-bounces@lists.xensource.com [mailto:xen-users-bounces@lists.xensource.com] Im

...1728 1 ipt_length 512 0 (unused) ipt_TOS 1024 12 ipt_TCPMSS 2368 0 (unused) ipt_REJECT 2784 4 ipt_REDIRECT 736 0 (unused) ipt_MASQUERADE 1216 0 (unused) ipt_LOG 3168 0 (unused) ip_nat_irc 2336 0 (unused) ip_nat_ftp 2944 0 (unused) iptable_nat 12980 3 [ipt_REDIRECT ipt_MASQUERADE ip_nat_irc ip_nat_ftp] ip_tables 10528 22 [ipt_ULOG iptable_mangle ipt_ttl ipt_tos ipt_tcpmss ipt_multiport ipt_mark ipt_mac ipt_state ipt_limit...

Hi, ok Im all new to this :-) for pasv ftp in your example you say for example to use ports 65500-65535, but i dont see that u open those ports in your example fw scripts..? any hints ? -- Christophe Zwecker mail: doc@zwecker.de Hamburg, Germany fon: +49 179 3994867 http://www.zwecker.de "Who is General Failure ? And why is he reading my disk

...e.net/ports.htm Here''s the contents of /etc/shorewall/modules ------------- loadmodule ip_tables loadmodule iptable_filter loadmodule ip_conntrack loadmodule ip_conntrack_ftp ports=21,23000 loadmodule ip_conntrack_irc loadmodule iptable_nat loadmodule ip_nat_ftp ports=21,23000 loadmodule ip_nat_irc --------------- Here''s the contents of /etc/modules.conf ------------- alias eth2 3c59x alias eth1 3c59x alias eth0 3c59x options ip_conntrack_ftp ports=21,23000 options ip_nat_ftp ports=21,23000 ---------- I searched the mailing list and found these 2 threads 1. http://lists.shorewall....

I recently did a set up where I replaced a simple D-link home router that was having trouble processing a T1's worth of bandwidth with a linux machine running iptables. the kernel was 2.6.29-r5 and I chose the SIP connection tracking modules from the menuconfig. Router worked fine for normal traffic, but I was unable to get the SIP phones to work. Using ngrep it was plain to see

-- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key

...t," $MODPROBE iptable_nat # Load the FTP NAT functionality into the core IPTABLES code # Allows use of non-PASV FTP. echo -en " ip_nat_ftp," $MODPROBE ip_nat_ftp # Load the IRC NAT functionality into the core IPTABLES code # Allows support of NAT of IRC DCC requests echo -en " ip_nat_irc" $MODPROBE ip_nat_irc #---------------- End of prep ---------------------- #---------- Let the tables begin ------------------- # Turn on forwarding echo "1" > /proc/sys/net/ipv4/ip_forward # Enable dynamic-address hacking echo "1" > /proc/sys/net/ipv4/ip_dynaddr...

...3456 8 ipt_TOS 1088 12 (autoclean) ipt_MASQUERADE 1248 2 (autoclean) ipt_LOG 3168 0 (autoclean) ipt_REJECT 3040 4 (autoclean) ipt_state 608 41 (autoclean) iptable_mangle 2208 1 (autoclean) ip_nat_irc 2240 0 (unused) ip_nat_ftp 2848 0 (unused) iptable_nat 15380 3 [ipt_MASQUERADE ip_nat_irc ip_nat_ftp] ip_conntrack_irc 2976 1 ip_conntrack_ftp 3744 1 ip_conntrack 16628 4 [ipt_MASQUERADE ipt_state ip_nat_irc ip_nat_ftp ip...

...----------------------------------------------- Already applied: submitted/2.4.4 submitted/conntrack-errormsg submitted/ip6tables-export-symbols submitted/ip6t_mac-fix-ipv6 submitted/ipchains-redirect-fix submitted/ip_nat_irc-srcaddr-fix submitted/ipt_LOG submitted/ipt_mac-fix submitted/ipt_MIRROR-ttl submitted/ipt_REJECT-checkentry submitted/ipt_unclean-ecn submitted/module-license submitted/netlink-tc...

This is a minor release of Shorewall. WARNING: This release introduces incompatibilities with prior releases. See http://www.shorewall.net/upgrade_issues.htm. Changes are: a) There is now a new NONE policy specifiable in /etc/shorewall/policy. This policy will cause Shorewall to assume that there will never be any traffic between the source and destination zones. b) Shorewall no longer

...Used by Not tainted ipt_TOS 1048 12 (autoclean) ipt_MASQUERADE 1208 1 (autoclean) ipt_LOG 3224 5 (autoclean) ipt_REJECT 2840 4 (autoclean) ipt_state 568 40 (autoclean) iptable_mangle 2160 1 (autoclean) ip_nat_irc 2256 0 (unused) ip_nat_ftp 2832 0 (unused) iptable_nat 13880 3 [ipt_MASQUERADE ip_nat_irc ip_nat_ftp] ip_conntrack_irc 2992 1 ip_conntrack_ftp 3728 1 ip_conntrack 16064 4 [ipt_MASQUERADE ipt_state ip_nat_irc ip_nat_ftp i...

...Under limited circumstances, a remote user may be able to crash a machine doing Network Address Translation (NAT). Estimated Severity: Medium. Systems Affected: Linux 2.4.20 kernels and recent 2.5 kernels with CONFIG_IP_NF_NAT_FTP or CONFIG_IP_NF_NAT_IRC enabled, or the ip_nat_ftp or ip_nat_irc modules loaded, on which ftp and irc users are not packet filtered out. Solution: BEST: Upgrade to Linux kernels 2.4.21 (stable), or apply the patch below. OR: As a workaround, the modules can be removed, or iptables can be used to block untrusted users from initiating ftp or irc conne...