John A. Sullivan III
2005-Oct-06 19:18 UTC
[Xen-users] netfilter matches missing in kernel 2.4.30
Hello, all. We are using xen 2.0.7 on Fedora Core 3. We have a domU built on 2.4.30 although all other domUs and the dom0 are on 2.6 kernels. The 2.4.30 kernel says it is using iptables 1.2.11. This version of netfilter should include several patches which are important to us in the ISCS network security management project (http://iscs.sourceforge.net) such as iprange, NETMAP and tcp-window-tracking. However, when we try them from the command line, they fail saying that the match or target is not available. We then thought that we had not enabled them in the kernel. However, when we do make ARCH=xen menuconfig we do not see these options in the kernel configuration. When we look at non-Xen kernels, we see these options. Is there a reason why these are missing? How do we get them? I''m a little hesitant to apply an old patch-o-matic to a kernel which is supposed to have these features already in the code. Thanks - John -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsullivan@opensourcedevel.com Financially sustainable open source development http://www.opensourcedevel.com _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users