Well, I've got the ETH1 and DHCP issues resolved (Thanks, Charles). Did not need to do anything with modules - had misinterpreted the install dialog and ifcfg-eth1 had BOOTPROTO=dhcp. eth1 should have been static with DHCP running from there. One unresolved issue - when I issue an IPChains command, the first time I get "IPchains incompatible with this kernel" and thereafter "IPChains protocol not available". The IPChains command is there, as for example "ipchains -h" works. But I haven't got masquerading or firewalling yet because of this. [Past history of this problem dialog unavailable as I'm on a dial-up laptop] Dick Richard Goodman dick@goodman1.net ---> Home: (508) 753-DICK trader@goodman1.net ---> Work: (508) 757-3452 voice/fax
On Tue, Sep 03, 2002 at 10:32:08AM -0400, Richard Goodman wrote: dick> One unresolved issue - when I issue an IPChains command, the first time I dick> get "IPchains incompatible with this kernel" and thereafter "IPChains dick> protocol not available". The IPChains command is there, as for example dick> "ipchains -h" works. But I haven't got masquerading or firewalling yet dick> because of this. I've seen this before. The /etc/rc.d/init.d/ipchains script manually modprobe's the ipchains module. If you aren't using that script, then you need to do it yourself: /sbin/modprobe ipchains -- Charles R. Anderson <cra@wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886
Many installs of RHL 7.3 will add both ipchains and iptables. It could be that iptables is running instead of ipchains. I believe that both are actually compiled as modules so you might need to rmmod the one in order to use the other. (I've ususally had the reverse problem: I prefer iptables and usually have to unload ipchains in order to use it. In the init scripts both are 'by default' set to S08ipchains and S08iptables, so ipchains loads first. ) On Tue, 3 Sep 2002, Charles R. Anderson wrote:
On Tue, Sep 03, 2002 at 10:32:08AM -0400, Richard Goodman wrote: dick> One unresolved issue - when I issue an IPChains command, the first time I dick> get "IPchains incompatible with this kernel" and thereafter "IPChains dick> protocol not available". The IPChains command is there, as for example dick> "ipchains -h" works. But I haven't got masquerading or firewalling yet dick> because of this.
I've seen this before. The /etc/rc.d/init.d/ipchains script manually modprobe's the ipchains module. If you aren't using that script, then you need to do it yourself:
/sbin/modprobe ipchains
On Tue, Sep 03, 2002 at 01:06:58PM -0400, Peter Gutowski wrote: peterg> Many installs of RHL 7.3 will add both ipchains and iptables. It could be peterg> that iptables is running instead of ipchains. I believe that both are peterg> actually compiled as modules so you might need to rmmod the one in order peterg> to use the other. (I've ususally had the reverse problem: I prefer peterg> iptables and usually have to unload ipchains in order to use it. In the peterg> init scripts both are 'by default' set to S08ipchains and S08iptables, so peterg> ipchains loads first. ) Good point. A "/sbin/chkconfig iptables off" will fix that, but in my experience, I've never seen it conflict, as long as there is no /etc/sysconfig/iptables file. -- Charles R. Anderson <cra@wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886
The modprobe did the trick - firewall (with a couple minor messages) and masquerading came right up. Then it took over an hour playing with the firewall which no longer allowed DHCP handshaking to occur (probably behaving right now, was acting wrong under RH7.0) so that I could access mail on this laptop (all the desktops have static IPs) I do plan to switch to IPtables, but I wanted the luxury of learning it first. Thanks to all, especially Charles-- I'm 99% up and definitely functioning again. Dick At 10:43 AM 9/3/2002 -0400, you wrote:
On Tue, Sep 03, 2002 at 10:32:08AM -0400, Richard Goodman wrote: dick> One unresolved issue - when I issue an IPChains command, the first time I dick> get "IPchains incompatible with this kernel" and thereafter "IPChains dick> protocol not available". The IPChains command is there, as for example dick> "ipchains -h" works. But I haven't got masquerading or firewalling yet dick> because of this.
I've seen this before. The /etc/rc.d/init.d/ipchains script manually modprobe's the ipchains module. If you aren't using that script, then you need to do it yourself:
/sbin/modprobe ipchains
-- Charles R. Anderson <cra@wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886
_______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug
Richard Goodman dick@goodman1.net
participants (3)
-
Charles R. Anderson -
Peter Gutowski -
Richard Goodman