Re: Errors when running firehol

On Sat, Jan 24, 2015 at 04:02:54PM -0800, Jason Miller wrote:
> On 18:06 Sat 24 Jan     , Phil Whineray wrote:
> > On Sat, Jan 24, 2015 at 09:56:47AM -0800, Jason Miller wrote:
> > > On 09:32 Sat 24 Jan     , Phil Whineray wrote:
> > > >   /sbin/iptables -t filter -A OUTPUT -m helper --helper ftp -j ACCEPT
> > > > 
> > > doesn't work; nf_conntrack_ftp is definitely loaded, see below
> > 
> > I see nf_nat_ftp is not in your list. I don't know for sure that is the
> > cause but could you try:
> > 
> >   modprobe nf_nat_ftp
> > 
> > then re-do the iptables command.
> Tried that, no change.

The inability to run that command is definitely the problem but I'm
stumped, sorry.

My only last debugging suggestion is to try a stock kernel (do gentoo
even do those) to check that it works.

Perhaps you can find some help to resolve the iptables problem on the
netfilter user mailing lists?
  http://www.netfilter.org/mailinglists.html

Cheers
Phil