r_quincy
2003-Sep-11 21:13 UTC
[Shorewall-users] DIFFICULTIES in UPGRADING to LINUX 2.4.21 with IPTABLES/NETFILTER 1.28; tips welcome
using custom kernel required rebuilding the userspace binary for iptables. in my implementation of netfilter/iptables (LEAF Bering Shorewall) iptables was deliberately built without libnsl.so.1, but iptables 1.28 requires libnsl.so.1 if compiled with modules/extensions (libipt_*.so). i compiled iptables monolithically (make NO_SHARED_LIBS=1), and rebooted. now iptables refuses to use /etc/services to reference port/service mnemonics (ssh, ftp, ftp-data) and these must be coded as numbers. otherwise it works, and netfilter/bering shorewall starts successfully. any tips to resolve these annoyances are welcome. On Thu, 11 Sep 2003 12:00:11 -0700 (PDT), <shorewall-users- request@lists.shorewall.net> wrote:> Send Shorewall-users mailing list submissions to > shorewall-users@lists.shorewall.net > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.shorewall.net/mailman/listinfo/shorewall-users > or, via email, send a message with subject or body ''help'' to > shorewall-users-request@lists.shorewall.net > > You can reach the person managing the list at > shorewall-users-owner@lists.shorewall.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Shorewall-users digest..." >-- "Nothing can harm you more than your own undisciplined thoughts." Dhammapada, Thoughts
Jason Maas
2003-Sep-12 08:00 UTC
[Shorewall-users] DIFFICULTIES in UPGRADING to LINUX 2.4.21 with IPTABLES/NETFILTER 1.28; tips welcome
Hi r_quincy, On Fri, 12 Sep 2003, r_quincy wrote:>using custom kernel required rebuilding the userspace binary for iptables. >in my implementation of netfilter/iptables (LEAF Bering Shorewall) iptablesAs stated on the Shorewall "Getting Help" web page: --- If you run Shorewall under Bering -- please post your question or problem to the LEAF Users mailing list (leaf-user@lists.sourceforge.net). --- Since your question is not about Shorewall, this is the wrong list. -Jason