Re: [ltib] Problem with iptables

[Stuart Hughes]

Hi Michał,

Please keep emails on the list.  If you turn on "configure the kernel" 
in ltib, or otherwise invoke kernel configuration you will get a kernel 
config screen.  For example:

$ ./ltib -p kernel -c -f

Processing platform: Freescale MPC8349E-mITX board
====================================================
using config/platform/mpc8349itx/.config

Processing: kernelxxxx
================================
.....
.....
Then a normal kernel config screen pops up:

┌───────────Linux Kernel Configuration ─────────────────┐
....
[ ] 64-bit kernel
    Processor support  --->

From here, navigate to:
[*] Networking support  --->
     Networking options  --->
 <*> Packet socket  (This is CONFIG_PACKET, see Help)
.....
[*] Network packet filtering framework (Netfilter)  --->

Within the Network package filtering framework you can select further 
otpion.  Take a look at: http://www.shorewall.net/kernel.htm

When you're done, save/exit and your kernel with the new options will be 
rebuilt.

Regards, Stuart

Michał Sewera wrote:
> Hi,
>
> but in fact there is a kernel menu in ltib (configure kernel), but
> here I can't find this CONFIG_PACKET  options to enable (it should be
> in make config). In which file I should look for this ?
>
> thanks a lot,
>
> regards
> m
>
> W dniu 22 lipca 2009 17:04 użytkownik Michał Sewera
> <address@hidden> napisał:
> > thanks
> > m
> >
> > W dniu 21 lipca 2009 10:40 użytkownik Stuart Hughes <address@hidden> napisał:
> > > Hi Michał,
> > >
> > > This isn't really an LTIB question, take a look at:
> > > http://www.linuxtopia.org/Linux_Firewall_iptables/x651.html
> > > http://netfilter.org/
> > >
> > > Regards, Stuart
> > >
> > > Michał Sewera wrote:
> > > > Hi,
> > > >
> > > > thanks - but what option should I enable in kernel config to have
> > > > iptables integrated ? I only see the netfilter, which I've already
> > > > enabled...
> > > >
> > > > thanks
> > > > m
> > > >
> > > > W dniu 20 lipca 2009 15:10 użytkownik Stuart Hughes <address@hidden>
> > > > napisał:
> > > > > Hi Michael,
> > > > >
> > > > > ./ltib --configure is for configuring LTIB itself (package selection
> > > > > etc).
> > > > >  From within there you can select:
> > > > >
> > > > > [*] Configure the kernel
> > > > >
> > > > > Alternatively you can say:
> > > > >
> > > > > $ ./ltib -p kernel -c
> > > > >
> > > > > Regards, Stuart
> > > > >
> > > > > Michał Sewera wrote:
> > > > > > Hi,
> > > > > >
> > > > > > but in LTIB I don't see an option (ltib --configure) to enable
> > > > > > iptables in kernel. There is a option to enable netfilter (i've
> > > > > > enabled this), but iptables program still is saying, that the table
> > > > > > 'filter' not exist
> > > > > >
> > > > > > thanks for any support
> > > > > > regards
> > > > > > m
> > > > > >
> > > > > > 2009/7/20 Stuart Hughes <address@hidden>:
> > > > > > > Hi Michał,
> > > > > > >
> > > > > > > This is more of a kernel question than an LTIB question, but I think
> > > > > > > you're
> > > > > > > on the right track.  Make sure you have the right kernel modules built
> > > > > > > (or
> > > > > > > enabled them as built-in).
> > > > > > >
> > > > > > > If they're kernel modules they should be found in
> > > > > > > rootfs/lib/modules/*/kernel/net/ipv4/
> > > > > > >
> > > > > > > If they are there but not loaded, try a modprobe at the command line on
> > > > > > > the
> > > > > > > target.
> > > > > > >
> > > > > > > Regards, Stuart
> > > > > > >
> > > > > > > Michał Sewera wrote:
> > > > > > > > Hi,
> > > > > > > >
> > > > > > > > I'm using the ltib package from BSP (MPC8313 processor), and after
> > > > > > > > deploying the solution with iptables (iptables v1.3.8), on the target
> > > > > > > > I've get the following error during running iptables:
> > > > > > > > "
> > > > > > > > iptables v1.3.8: can't initialize iptables table `filter': Table does
> > > > > > > > not exist (do you need to insmod?)
> > > > > > > > Perhaps iptables or your kernel needs to be upgraded.
> > > > > > > > "
> > > > > > > > Anyone has any idea what's wrong ? I've tryed to extend kernel
> > > > > > > > configuration in ltibe (by enabling netfilter i.e). but no results.
> > > > > > > >
> > > > > > > > Also I not see any iptables modules, which could be loaded with
> > > > > > > > insmod/modprobe
> > > > > > > >
> > > > > > > >
> > > > > > > > thanks a lot for any support!
> > > > > > > >
> > > > > > > > thanks
> > > > > > > > m
> > > > > > > >
> > > > > > > >
> > > > > > > > _______________________________________________