Re: ipfilter 4.1.31 - Centos Linux 5.2

Steve Clark <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <12598_1219351745_48ADD4C1_12598_15669_1_48ADD486.30403@netwolves.com>
Ross Cameron wrote:
> Hi there Steve how are you?
> 
> I'm still snowed under here at work and havent had a chance to look at 
> IP-F and Linux at all :(
> No chance you could email me the steps you took and maybe a patch or two 
> that you had to make to get it working?
> 
> I'm still toying with getting the Linux port to be unreliant on RPM when 
> I have some time.
> 
> Ciao ciao
> Ross
> 
> On Thu, Aug 21, 2008 at 9:36 PM, Steve Clark <[email protected] 
> <mailto:[email protected]>> wrote:
> 
>     Hi,
> 
>     I have gotten 4.1.31 to compile an run on centos 5.2 linux kernel
>     2.6.18-92.1.10.el5.
> 
>     It seems to be mostly working ok after some minor changes for
>     locking. I have just discovered a problem with ipnat though trying
>     to setup a ftp proxy rule.
> 
>     map eth1 192.168.4.0/24 <http://192.168.4.0/24>  -> 2.2.2.1/32
>     <http://2.2.2.1/32> proxy port ftp ftp/tcp
> 
>     when I try to insert this I get:
>     [root@Z1234 proc]# ipnat -CF -f /etc/ipnat.cfg
>     0 entries flushed from NAT table
>     0 entries flushed from NAT list
>     1:ioctl(add/insert nat rule): No such file or directory
> 
>     other map rules seem to be ok.
> 
>     Could someone point me where I should start looking for this
>     problem. I haven't been able to
>     figure out how ip_ftp_pxy.c get compiled and where it ends up. I
>     can't find a .o file in the
>     Linux/Linux-2.6.18-92.1.10.el5-i686 directory.
> 
>     Thanks,
>     Steve
> 
> 
Sure - getting ready to leave I'll do it tomorrow - some of the changes were hacks - like just ignoring
the changes Darren had made for nat port randomization - cause I couldn't figure out how to get it compiled
under linux.

Steve
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.