Re: Shorewall6 start error

Tuomo Soini <[email protected]>
Newsgroups gmane.comp.security.shorewall
Organization Foobar Oy
Message-ID <[email protected]>
On Thu, 9 Dec 2021 16:23:21 +0530
Nagarjun J <[email protected]> wrote:

> Hello,
> 
> Do I need to enable any flags in the kernel ?
> I see *nf_reject_ipv4 module and I did not see that for ipv6.*
> 
> root@a48c0842-1c54-8659-7c7a-8d64480bc164:~# lsmod | grep ipv4
> *nf_reject_ipv4         16384  1 ipt_REJECT*
> nf_log_ipv4            16384  3
> nf_log_common          16384  2 nf_log_ipv4,nf_log_ipv6
> nf_defrag_ipv4         16384  1 nf_conntrack
> root@a48c0842-1c54-8659-7c7a-8d64480bc164:~# lsmod | grep ipv6
> nf_log_ipv6            16384  0
> nf_log_common          16384  2 nf_log_ipv4,nf_log_ipv6
> nf_defrag_ipv6         16384  1 nf_conntrack

Are you compiling your own kernel?

You sure do need nf_reject_ipv6.

-- 
Tuomo Soini <[email protected]>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.