Shorewall users - Jul 2004 - Do I need ipt_pkttype in mykernel?

I just installed shorewall 2.0.3 on my debian woody box. Everything seems to run
ok but on shorewall startup, the message

modprobe: cant locate module ipt_pkttype

is displayed several times. If looked in my kernel config and found out, that I
didnt compiled this option. My question is: do I really need this module for
shorewall to function properly? Or is it not really neccassary. I ''ve
done some portscans and everything seems to run ok.

My configuration is the ''one-interface'' type. I only changed
the interface to ppp0 and added some rules for special ports.

jba@lisa:/usr/src/linux$ ip addr show
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
2: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1492 qdisc pfifo_fast qlen 3
    link/ppp
    inet 80.133.12.253 peer 217.5.98.47/32 scope global ppp0
jba@lisa:/usr/src/linux$ ip route show
217.5.98.47 dev ppp0  proto kernel  scope link  src 80.133.12.253
default via 217.5.98.47 dev ppp0


Regards,

Juergen



________________________________________________________________
Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193

On Wed, 14 Jul 2004, Juergen Bausa wrote:
> I just installed shorewall 2.0.3 on my debian woody box. Everything
> seems to run ok but on shorewall startup, the message
> 
> modprobe: cant locate module ipt_pkttype
> 
> is displayed several times. If looked in my kernel config and found out,
> that I didnt compiled this option. My question is: do I really need this
> module for shorewall to function properly? Or is it not really
> neccassary. I ''ve done some portscans and everything seems to run
ok.
> 
> My configuration is the ''one-interface'' type. I only
changed the
> interface to ppp0 and added some rules for special ports.
> 
You do not need pkttype support -- Shorewall tries to use it and if it 
fails then it uses a different means for accomplishing the same thing. In 
Shorewall 2.0.6, you will be able to set PKTTYPE=No in shorewall.conf and 
stop Shorewall from trying to use that module entirely. An early version 
of that code may be found in 
ftp://shorewall.net/pub/shorewall/2.0.shorewall-2.0.6/.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net