This shows up when I start shorewall. Is this bad? Shorewall has detected the following iptables/netfilter capabilities: NAT: Available Packet Mangling: Available Multi-port Match: Available Connection Tracking Match: Not available I have that compiled into my kernel(Connection Tracking Match). Or am I an idiot, and missing something very obvious? # # IP: Netfilter Configuration # CONFIG_IP_NF_CONNTRACK=y CONFIG_IP_NF_FTP=m # CONFIG_IP_NF_AMANDA is not set # CONFIG_IP_NF_TFTP is not set CONFIG_IP_NF_IRC=m # CONFIG_IP_NF_QUEUE is not set CONFIG_IP_NF_IPTABLES=y CONFIG_IP_NF_MATCH_LIMIT=y CONFIG_IP_NF_MATCH_MAC=y CONFIG_IP_NF_MATCH_PKTTYPE=m CONFIG_IP_NF_MATCH_MARK=y CONFIG_IP_NF_MATCH_MULTIPORT=y CONFIG_IP_NF_MATCH_TOS=y # CONFIG_IP_NF_MATCH_ECN is not set # CONFIG_IP_NF_MATCH_DSCP is not set CONFIG_IP_NF_MATCH_AH_ESP=m CONFIG_IP_NF_MATCH_LENGTH=m CONFIG_IP_NF_MATCH_TTL=m CONFIG_IP_NF_MATCH_TCPMSS=y # CONFIG_IP_NF_MATCH_HELPER is not set CONFIG_IP_NF_MATCH_STATE=y # CONFIG_IP_NF_MATCH_CONNTRACK is not set CONFIG_IP_NF_MATCH_UNCLEAN=y CONFIG_IP_NF_MATCH_OWNER=m CONFIG_IP_NF_FILTER=y CONFIG_IP_NF_TARGET_REJECT=y CONFIG_IP_NF_TARGET_MIRROR=m CONFIG_IP_NF_NAT=y CONFIG_IP_NF_NAT_NEEDED=y CONFIG_IP_NF_TARGET_MASQUERADE=y CONFIG_IP_NF_TARGET_REDIRECT=y # CONFIG_IP_NF_NAT_LOCAL is not set CONFIG_IP_NF_NAT_SNMP_BASIC=m CONFIG_IP_NF_NAT_IRC=m CONFIG_IP_NF_NAT_FTP=m CONFIG_IP_NF_MANGLE=y CONFIG_IP_NF_TARGET_TOS=y # CONFIG_IP_NF_TARGET_ECN is not set # CONFIG_IP_NF_TARGET_DSCP is not set CONFIG_IP_NF_TARGET_MARK=y CONFIG_IP_NF_TARGET_LOG=y CONFIG_IP_NF_TARGET_ULOG=m CONFIG_IP_NF_TARGET_TCPMSS=y # CONFIG_IP_NF_ARPTABLES is not set # CONFIG_IPV6 is not set # CONFIG_KHTTPD is not set # CONFIG_ATM is not set # CONFIG_VLAN_8021Q is not set # CONFIG_IPX is not set # CONFIG_ATALK is not set -- Joe *** I can only please one person a day. Today is not your day and tomorrow doesn''t look good either. ***
Crap....forget it. I found it. I''m just blind.> This shows up when I start shorewall. Is this bad? > > Shorewall has detected the following iptables/netfilter capabilities: > NAT: Available > Packet Mangling: Available > Multi-port Match: Available > Connection Tracking Match: Not available > > I have that compiled into my kernel(Connection Tracking Match). > Or am I an idiot, and missing something very obvious? > > # > # IP: Netfilter Configuration > # > CONFIG_IP_NF_CONNTRACK=y > CONFIG_IP_NF_FTP=m > # CONFIG_IP_NF_AMANDA is not set > # CONFIG_IP_NF_TFTP is not set > CONFIG_IP_NF_IRC=m > # CONFIG_IP_NF_QUEUE is not set > CONFIG_IP_NF_IPTABLES=y > CONFIG_IP_NF_MATCH_LIMIT=y > CONFIG_IP_NF_MATCH_MAC=y > CONFIG_IP_NF_MATCH_PKTTYPE=m > CONFIG_IP_NF_MATCH_MARK=y > CONFIG_IP_NF_MATCH_MULTIPORT=y > CONFIG_IP_NF_MATCH_TOS=y > # CONFIG_IP_NF_MATCH_ECN is not set > # CONFIG_IP_NF_MATCH_DSCP is not set > CONFIG_IP_NF_MATCH_AH_ESP=m > CONFIG_IP_NF_MATCH_LENGTH=m > CONFIG_IP_NF_MATCH_TTL=m > CONFIG_IP_NF_MATCH_TCPMSS=y > # CONFIG_IP_NF_MATCH_HELPER is not set > CONFIG_IP_NF_MATCH_STATE=y > # CONFIG_IP_NF_MATCH_CONNTRACK is not set > CONFIG_IP_NF_MATCH_UNCLEAN=y > CONFIG_IP_NF_MATCH_OWNER=m > CONFIG_IP_NF_FILTER=y > CONFIG_IP_NF_TARGET_REJECT=y > CONFIG_IP_NF_TARGET_MIRROR=m > CONFIG_IP_NF_NAT=y > CONFIG_IP_NF_NAT_NEEDED=y > CONFIG_IP_NF_TARGET_MASQUERADE=y > CONFIG_IP_NF_TARGET_REDIRECT=y > # CONFIG_IP_NF_NAT_LOCAL is not set > CONFIG_IP_NF_NAT_SNMP_BASIC=m > CONFIG_IP_NF_NAT_IRC=m > CONFIG_IP_NF_NAT_FTP=m > CONFIG_IP_NF_MANGLE=y > CONFIG_IP_NF_TARGET_TOS=y > # CONFIG_IP_NF_TARGET_ECN is not set > # CONFIG_IP_NF_TARGET_DSCP is not set > CONFIG_IP_NF_TARGET_MARK=y > CONFIG_IP_NF_TARGET_LOG=y > CONFIG_IP_NF_TARGET_ULOG=m > CONFIG_IP_NF_TARGET_TCPMSS=y > # CONFIG_IP_NF_ARPTABLES is not set > # CONFIG_IPV6 is not set > # CONFIG_KHTTPD is not set > # CONFIG_ATM is not set > # CONFIG_VLAN_8021Q is not set > # CONFIG_IPX is not set > # CONFIG_ATALK is not set > > > -- > Joe > > *** > I can only please one person a day. > Today is not your day and tomorrow doesn''t look good either. > *** > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: > http://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm >-- Joe *** I can only please one person a day. Today is not your day and tomorrow doesn''t look good either. ***
On Fri, 8 Aug 2003, Joe Gofton wrote:> > I have that compiled into my kernel(Connection Tracking Match). > Or am I an idiot, and missing something very obvious? > > # CONFIG_IP_NF_MATCH_CONNTRACK is not set >You are an idiot and missing something very obvious :-) -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
LOL! Thanks.> On Fri, 8 Aug 2003, Joe Gofton wrote: > >> >> I have that compiled into my kernel(Connection Tracking Match). >> Or am I an idiot, and missing something very obvious? >> >> # CONFIG_IP_NF_MATCH_CONNTRACK is not set >> > > You are an idiot and missing something very obvious :-) > > -Tom > -- > Tom Eastep \ Shorewall - iptables made easy > Shoreline, \ http://shorewall.net > Washington USA \ teastep@shorewall.net > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: > http://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm >-- Joe *** I can only please one person a day. Today is not your day and tomorrow doesn''t look good either. ***