Re: Problem with 2.4.28 kernel config

Tom Eastep
Tue, 30 Nov 2004 22:58:51 -0000

On Tue, 2004-11-30 at 14:47 -0800, Shawn Wright wrote:
> I just recompiled a plain vanilla 2.4.28 kernel, and used the Shorewall.net
> kernel config as a guideline. For some reason, I get this:
>
> Nov 30 12:05:34 fw shorewall: Shorewall has detected the following
> iptables/netfilter capabilities:
> Nov 30 12:05:34 fw shorewall:    NAT: Available
> Nov 30 12:05:34 fw shorewall:    Packet Mangling: Available
> Nov 30 12:05:34 fw shorewall:    Multi-port Match: Available
> Nov 30 12:05:34 fw shorewall:    Connection Tracking Match: Not
> available
> .....
>
> Clearly it thinks "Connection Tracking Match: Not available", yet
I have set
> the kernel compile options as follows. The only missing "match"
module is
> "TLL Match Support", but that is also missing from the example
config on
> shorewall.net. Before I recompile, is this error caused by some other
> issue that I''m not seeing? I did not get this on previous kernels,
which I
> *thought* I had configured the same.

At a root shell prompt, try:

iptables -N foobar
iptables -A foobar -M CONNTRACK --ctorigdst 192.168.1.1 -j ACCEPT

What do you see?