Re: [gentoo-hardened] loss of stateful iptables 2.6.17-hardened-r1 - 64bit

[John Schember]

This is an issue related to you alone, I'm running a 64 bit hardened
install and am not having any issues with -m state. It looks like you
missed an option in your kernel. You either don't have support enabled
or if it's a module you don't have it loaded. 
Check:
Networking --->
   Networking option --->
      [*] Network packet filtering (replaces ipchains) --->
         Core Netfilter Configuration --->
            <*> Netfilter Xtables support (required for ip_tables)
               <*> "state" match support

John Schember


On Mon, 2006-10-23 at 00:38 -0600, Jason Booth wrote:
> Ever since I got this comp about a month ago, my firewall script no longer
> works. basically, anything that uses -m state --state fails:
>
> lazybird ~ # iptables -I INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> iptables: No chain/target/match by that name
>
> This has only happened with 64-bit and hardened kernel. I believe I put in
> support for all the modules both in Xtables and IPtables (compiled in kernel,
> not as modules)
>
> Is this a known issue or has anyone had this problem?
>
> TIA,
> Jason
>
> 2.6.17-hardened-r1 x86_64 AMD Athlon(tm) 64 Processor 3500+
> --
>  gpg public key: http://lazybird.hyperintelligent.net/~jbooth/jbooth_key.asc

-- 
gentoo-hardened@g.o mailing list