Re: ipfilter 4.1.31 - Centos Linux 5.2
Steve Clark <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <12598_1219351745_48ADD4C1_12598_15669_1_48ADD486.30403@netwolves.com> |
Ross Cameron wrote: > Hi there Steve how are you? > > I'm still snowed under here at work and havent had a chance to look at > IP-F and Linux at all :( > No chance you could email me the steps you took and maybe a patch or two > that you had to make to get it working? > > I'm still toying with getting the Linux port to be unreliant on RPM when > I have some time. > > Ciao ciao > Ross > > On Thu, Aug 21, 2008 at 9:36 PM, Steve Clark <[email protected] > <mailto:[email protected]>> wrote: > > Hi, > > I have gotten 4.1.31 to compile an run on centos 5.2 linux kernel > 2.6.18-92.1.10.el5. > > It seems to be mostly working ok after some minor changes for > locking. I have just discovered a problem with ipnat though trying > to setup a ftp proxy rule. > > map eth1 192.168.4.0/24 <http://192.168.4.0/24> -> 2.2.2.1/32 > <http://2.2.2.1/32> proxy port ftp ftp/tcp > > when I try to insert this I get: > [root@Z1234 proc]# ipnat -CF -f /etc/ipnat.cfg > 0 entries flushed from NAT table > 0 entries flushed from NAT list > 1:ioctl(add/insert nat rule): No such file or directory > > other map rules seem to be ok. > > Could someone point me where I should start looking for this > problem. I haven't been able to > figure out how ip_ftp_pxy.c get compiled and where it ends up. I > can't find a .o file in the > Linux/Linux-2.6.18-92.1.10.el5-i686 directory. > > Thanks, > Steve > > Sure - getting ready to leave I'll do it tomorrow - some of the changes were hacks - like just ignoring the changes Darren had made for nat port randomization - cause I couldn't figure out how to get it compiled under linux. Steve