IPTables extensions in Debian Stable

[Juan Roco]

Hi all,

I need to use some extensions in IPTables that are not included in the
standard distribution.

I've found that what I need is in /lib/iptables/. Files have .so extensions,
and according to some documents I've read they are the modules that iptables
load, but they also say that you need to have the modules in the
/lib/modules/2.4.18-1-686/kernel/net/ipv4/netfilter directory in order to
work.

Even more, the files in this directory have a different extension. For
instance:

/lib/iptables/libipt_REDIRECT.so
/lib/modules/2.4.18-1-686/kernel/net/ipv4/netfilteript_REJECT.o

Unfortunaltey not all the modules in /lib/iptables are in
/lib/modules.../netfilter

What do I need to do to add an extension that is not already installed?

For example I need to use libipt_icmp.so but I don't have ipt_icmp.o

Thank you!!!

JF Roco

_________________________________________________________________
MSN Amor: busca tu ˝ naranja http://latam.msn.com/amor/

--
To UNSUBSCRIBE, email to debian-fire...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

[Mike Mestnik]

2.4.18 Would probly be missing some modules. 2.4.24 and 2.4.25 may be
more feature full. apt-get install kernel-image-2.4.25-1-686/sid should
work nicely, need a sid deb archive.

/etc/apt/preferences:
Package: *
Pin: release a=testing
Pin-Priority: 90

/etc/apt/sources.list:
deb http://ftp.us.debian.org/debian/ sid main non-free contrib

__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com

[Juan Roco]

Thank you very much Mike, but I cannot move from stable distribution. Is
there any way to get new extensions work in Woody?

Best regards

JF

_________________________________________________________________
Charla con tus amigos en línea mediante MSN Messenger:
http://messenger.latam.msn.com/

[Klaus Holler]

On Friday 12 March 2004 22:25, Juan Roco wrote:
> Thank you very much Mike, but I cannot move from stable
> distribution. Is there any way to get new extensions work in Woody?
>

No, you should only take the latest kernel source (2.4.25) from sid -
there is no need to update all packages to sid; this is ensured by
using the low pinning value of 90 as mentioned in
Mike's /etc/apt/preferences example.

Using this preferences file, you can install packages from sid only by
explicitly specifying apt-get install packagename/sid ...

Refer to the APT-Howto and the APT-Reference
(under /usr/share/doc/Debian/apt-howto chapter 3.8
and /usr/share/doc/Debian/reference chapter 6.2) for details.

Regards,
Klaus

> >2.4.18 Would probly be missing some modules. 2.4.24 and 2.4.25
> > may be more feature full. apt-get install
> > kernel-image-2.4.25-1-686/sid should work nicely, need a sid deb
> > archive.
> >
> >/etc/apt/preferences:
> >Package: *
> >Pin: release a=testing
> >Pin-Priority: 90
> >
> >/etc/apt/sources.list:
> >deb http://ftp.us.debian.org/debian/ sid main non-free contrib
> >
> >--- Juan Roco <jfr...@hotmail.com> wrote:
> > > Hi all,
> > >
> > > I need to use some extensions in IPTables that are not included
> > > in the standard distribution.
> > >
> > > I've found that what I need is in /lib/iptables/. Files have
> > > .so extensions,
> > > and according to some documents I've read they are the modules
> > > that iptables
> > > load, but they also say that you need to have the modules in
> > > the /lib/modules/2.4.18-1-686/kernel/net/ipv4/netfilter
> > > directory in order to
> > > work.

> > > What do I need to do to add an extension that is not already

> > > installed?
> > >
> > > For example I need to use libipt_icmp.so but I don't have
> > > ipt_icmp.o
> > >
> > > Thank you!!!
> > >
> > > JF Roco

--
Dipl.-Ing. Klaus Holler <gmx.at after kho@>

[Mike Mestnik]

It all depends on you. As I said your not likely to find many of the
newer moduals in even 2.4.18. The reasonf for this is stability. If you
willing to run the latesed 2.4 kernel, even if it's not part of stable
then you can download the debs and install them.

There is also...
deb http://www.backports.org/debian stable all

That includes 2.4.25 from unstable, backports are not supported thought.

[Juan Roco]

Hi Mike,

Thank you for your help. I didn't know www.backports.com... very
interesting.

Also, your answer regarding stability is what I needed.

Best regards

JF

_________________________________________________________________
Las mejores tiendas, los precios mas bajos, entregas en todo el mundo,
YupiMSN Compras: http://latam.msn.com/compras/