Brian J. Murrell wrote:> I''ve found that for some reason, all of a sudden, I need to
include
> modules such as the following in shorewall''s modules file for my
openwrt
> platform:
>
> loadmodule ipt_LOG
> loadmodule ipt_CONNMARK
> loadmodule ipt_connmark
> loadmodule ipt_pkttype
> loadmodule ipt_mac
>
> I have been using this device for a month or two now and having to do
> this just this morning is a new requirement so something has changed.
> I''m just not quite sure what.
>
> How are these ipt_* kernel modules normally loaded on a Linux system in
> response to Shorewall wanting to add rules such as
>
> + /usr/sbin/iptables -t mangle -A OUTPUT -m connmark ! --mark 0/0xFF -j
CONNMARK --restore-mark --mask 0xFF
>
> Knowing that will help me figure out what I have broken on my openwrt
> router.
They are loaded by the module autoloader in the kernel.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/