Baslinux mailing list

[sindi keesan <keesan AT sdf.lonestar.org>]

On Fri, 8 Dec 2006 3aoo-cvfd AT dea.spamcon.org wrote:

> sindi keesan wrote:
> > > > Steven said to try with just FIREWALL, IP_FIREWALL and IP_MASQUERADE.
> > >
> > > That's in addition to everything already set in
> > > the default BL3 kernel.

CONFIG_PACKET=Y
CONFIG_UNIX=Y
CONFIG_INET=Y

> > What other lines are relevant to firewalls?
>
> Lots.  If you want a full list, see the HOWTO.
>
> > David listed everything in the 'big' kernel,
> > which I hope I do not need.
>
> As I said above, start with the config for the
> default BL3 kernel, add FIREWALL, IP_FIREWALL
> and IP_MASQUERADE.

I am configuring for 2.4.31, which supports USB and also works with the 3 
nfs modules which would not insert in 2.2.26 or 2.2.16 with p1 kernel. 
The non-pentium kernels don't boot on some of our machines with ramdisk or 
loop linux.  So I can't use the BL3 configuration (for 2.2.26).

2.4.31 uses a different system, proxy instead of packet, and does not have 
those three config lines.  A search on ipchains and masquerade in 
kernel documentation suggested:

CONFIG_NETFILTER=Y              to use masquerade
CONFIG_IP_NF_COMPAT_IPCHAINS=Y  to 'put back' ipchains capability

I did not find FIREWALL in .config
David, or anyone else with 2.4.31, are these two all I need?

> Cheers,
> Steven
>
> -----------------------
> BasicLinux mailing list
> -----------------------
> http://www.basiclinux.com.ru
> http://www.ibiblio.org/pub/linux/distributions/baslinux/
> ------------------------------------
> To exit, send subject=unsubscribe to
> baslinux-request AT lists.ibiblio.org

keesan AT sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org