Re: [gentoo-hardened] loss of stateful iptables 2.6.17-hardened-r1 - 64bit

[Jason Booth]

On Monday 23 October 2006 07:33, John Schember wrote:
> This is an issue related to you alone, I'm running a 64 bit hardened
> install and am not having any issues with -m state. It looks like you
> missed an option in your kernel. You either don't have support enabled
> or if it's a module you don't have it loaded.
> Check:
> Networking --->
>    Networking option --->
>       [*] Network packet filtering (replaces ipchains) --->
>          Core Netfilter Configuration --->
>             <*> Netfilter Xtables support (required for ip_tables)
>                <*> "state" match support
Yeah that's exactly what i thought only match wasn't an option in the config 
this time... possibly something got messed up in patching to disable the 
option. I'll wipe the tarball and try again tonight.

thanks,
Jason
>
> John Schember
>
> On Mon, 2006-10-23 at 00:38 -0600, Jason Booth wrote:
> > Ever since I got this comp about a month ago, my firewall script no
> > longer works. basically, anything that uses -m state --state fails:
> >
> > lazybird ~ # iptables -I INPUT -m state --state RELATED,ESTABLISHED -j
> > ACCEPT iptables: No chain/target/match by that name
> >
> > This has only happened with 64-bit and hardened kernel. I believe I put
> > in support for all the modules both in Xtables and IPtables (compiled in
> > kernel, not as modules)
> >
> > Is this a known issue or has anyone had this problem?
> >
> > TIA,
> > Jason
> >
> > 2.6.17-hardened-r1 x86_64 AMD Athlon(tm) 64 Processor 3500+
> > --
> >  gpg public key:
> > http://lazybird.hyperintelligent.net/~jbooth/jbooth_key.asc

-- 
 gpg public key: http://lazybird.hyperintelligent.net/~jbooth/jbooth_key.asc
-- 
gentoo-hardened@g.o mailing list