Thanks for Dachstein suggestion (and, yes, Charles is amazingly patient and helpful) but I have to stick with Bering due to other requirements that I have set on myself. Specifically, the desire to learn iptables. If I end up having to figure out how to compile my own kernel then so it has to be. For the moment, however, I will go to the source...
Mr. Nilo and Mr. Wolzak, how do you feel about including these patches into the Bering distribution. If this is feasible then could we expect it in the rc2 release? Awaiting your response, Eric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Chad Carr Sent: Wednesday, April 24, 2002 10:22 AM To: Eric B Kiser Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Leaf-user] ip_masq_ipsec.o for bering On Wed, 24 Apr 2002 00:27:23 -0400 "Eric B Kiser" <[EMAIL PROTECTED]> wrote: > damn... I have just been sitting here staring at my monitor while the > reality of what I am trying to do has dawned on me. When Tom pointed me > in the direction of the files ip_conntrack_ipsec.o and ip_nat_ipsec.o I > began searching for them under the assumption that I would just load > them like any other module. After reading your reply things suddenly > came more into focus. If I understand this correctly, then what I am > actually looking for is a patch that will make these options available > for when I have to recompile the kernel. At which time, I can then > select to either compile them as modules or to compile them directly > into the kernel. > > Thanks Joey, for the offer of assistance. Any and all help would be > graciously received. I am still a newbie here so if someone would be > kind enough to either confirm or deny my assumptions about how to go > about this I would appreciate it. Your assumptions are correct. As Tom said, the only "ip_conntrack" and "ip_nat" (formerly "ip_masq") modules available in the default kernel sources are ftp and irc. Any others will need to be applied to your kernel sources as a patch (I believe Tom pointed you at the netfilter site before), then configure your kernel to build those new options as modules and build it. http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO.txt As far as I have seen, Bering does not include any non-standard netfilter modules. But, since Bering and Dachstein seem to be gaining some popularity for ipsec-based systems, it never hurts to ask Jacques whether he can patch his kernel with these. Well, it won't hurt you anyways (eh, Jacques!) ;-) HTH, Chad _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
