Gentoo Archives: gentoo-user

From: "W.Kenworthy" <billk@×××××××××.au>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] iptables
Date: Tue, 30 Aug 2005 02:18:37
Message-Id: 1125366124.20471.57.camel@localhost
In Reply to: [gentoo-user] iptables by John Dangler
1 iptables has an "extensions" use flag which you may or may not need
2 depending on what the firestarter scripts do.
3
4 After installing modules, you need to run modules-update to get the
5 modules database sorted out. This may fix the symbol error. In some
6 cases, you need to reboot into the new kernel as the symbols in the
7 running kernel and new modules may be out of sync.
8
9 BillK
10
11
12
13
14 On Mon, 2005-08-29 at 19:44 -0400, John Dangler wrote:
15 > I emerged firestarter (during which I got iptables), and forgot that I
16 > didn't have iptables emerged prior. I went into the kernel and selected (as
17 > the doc I found suggests) all of the options as modules under iptables. (The
18 > doc also says that if they are compiled as modules, I didn't need to
19 > reboot).
20 > I did add iptables to /etc/modules.autoload.d/kernel-2.6 (for subsequent
21 > rebooting).
22 >
23 > modprobe ip_tables results in:
24 > FATAL: Error inserting ip_tables
25 > (/lib/modules/2.6.12-gentoo-r9/kernel/net/ipv4/netfilter/ip_tables.ko):
26 > Unknown symbol in module, or unknown parameter.
27 >
28 > dmesg produces -
29 > ip_tables: disagrees about version of symbol skb_copy_files
30 > ip_tables: Unknow symbol skb_copy_bits
31 > ip_tables: Unknown symbol nf_register_sockopt
32 > ip_tables: ip_tables: Unknown symbol nf_unregister_sockopt
33 > ip_tables: Unknown symbol nf_unregister_sockopt
34 >
35 > (I just found another doc that says to ONLY modprobe IF you haven't built
36 > this as a module)
37 > DOH!
38 >
39 > I went back into the kernel config and removed all but the essential options
40 > for iptables... (just iptables module) and rebuilt the kernel
41 >
42 > A reboot (aside from losing my wireless), produced an error on boot loading
43 > iptables.
44 > no other text in dmesg points to the problem.
45 >
46 > John D
47 >
48 >
49 >
50 >
51 --
52 gentoo-user@g.o mailing list