| View previous topic :: View next topic |
| Author |
Message |
alcorel
n00b
Joined: 02 Mar 2004
Posts: 67
|
 Posted: Sun Nov 17, 2013 7:02 am Post subject: [ip_tables ufw] configuration noyau (résolu) |
 |
|
Bonjour,
En fait, j'ai souhaiterai utiliser le firewall UFW dans une config très simple mais our le moment, ça tourne en rond.
UFW est lancé mais ip_tables pose problème. J'ai pas activé grand chose dans le noyau, notamment dans Netfilter.
si quelqu'un a une idée ou un .config avec ip-tables fonctionnel, je suis preneur
kernel gentoo-sources 3.10.17
| Code: |
-*- Networking support --->
Networking options --->
│ │ <*> Packet socket
│ │ <*> Packet: sockets monitoring interface
│ │ <*> Unix domain sockets
│ │ <M> Transformation user configuration interface
│ │ <M> PF_KEY sockets
│ │ [*] TCP/IP networking
│ │ [*] IP: advanced router
│ │ [*] IP: policy routing
│ │ [*] IP: kernel level autoconfiguration
│ │ [*] IP: DHCP support
│ │ <M> IP: tunneling
│ │ [*] Network packet filtering framework (Netfilter) ---> |
| Code: | # ufw default deny incoming
ERROR: problem running ufw-init
iptables v1.4.20: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.20: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.20: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded. |
merci d'avance
alcorel
Last edited by alcorel on Mon Nov 25, 2013 7:33 am; edited 1 time in total |
|
| Back to top |
|
 |
Poussin
l33t
Joined: 08 Jun 2007
Posts: 659
Location: Liège
|
| Posted: Sat Nov 23, 2013 3:36 pm Post subject: |
|
|
le minimum, c'est déjà d'activer, comme il te le dit, la table filter: CONFIG_IP_NF_FILTER
Après ça va dépendre des fonctionnalités que tu veux utiliser, mais de toute façon, les messages d'erreurs sont assez explicites, il suffira d'activer la bonne option dans le kernel en fonction du message d'erreur
(Rappel, le / dans le menuconfig permet de faire une recherche) |
|
| Back to top |
|
|
alcorel
n00b
Joined: 02 Mar 2004
Posts: 67
|
| Posted: Sun Nov 24, 2013 6:53 am Post subject: |
|
|
super, merci beaucoup!
j'ai trouvé les modules noyau à charger dans un howto mais il me manquait une solution pour les retrouver dans menuconfig
décidément, pas facile de se remettre dedans! :p
[edit] en fait tout les modules nécessaire étaient communiqué par l'ebuild:
| Code: | * Messages for package net-firewall/ufw-0.34_pre805:
* CONFIG_NETFILTER_XT_MATCH_COMMENT: is not set when it should be.
* CONFIG_NETFILTER_XT_MATCH_HL: is not set when it should be.
* CONFIG_NETFILTER_XT_MATCH_LIMIT: is not set when it should be.
* CONFIG_NETFILTER_XT_MATCH_MULTIPORT: is not set when it should be.
* CONFIG_NETFILTER_XT_MATCH_RECENT: is not set when it should be.
* CONFIG_NETFILTER_XT_MATCH_STATE: is not set when it should be.
* CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: is not set when it should be.
* CONFIG_NETFILTER_XT_TARGET_LOG: is not set when it should be.
* CONFIG_IP_NF_TARGET_REJECT: is not set when it should be.
* CONFIG_IP6_NF_TARGET_REJECT: is not set when it should be.
* Please check to make sure these options are set correctly.
* Failure to do so may cause unexpected problems.
* Kernel options listed below are not set. They are not mandatory, but they are often useful. If you don't need some of them, please remove relevant module name(s) from IPT_MODULES in '/etc/default/ufw' before (re)starting ufw. Otherwise ufw may fail to start!
* NF_NAT_FTP: for better support for active mode FTP.
* NF_CONNTRACK_FTP: for better support for active mode FTP.
* NF_CONNTRACK_NETBIOS_NS: for better Samba support. |
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
French
