有關iptables 與 核心問題

這個版面主要討論 debian 在 server 端的應用問題, server 種類繁多..舉凡 Web Server 、 File Server、 DHCP Server..等等。

版主: 阿信

有關iptables 與 核心問題

文章alex140000 » 週一 4月 21, 2008 10:18 am

目前使用的核心為2.6.18-6-486-ETCH的核心,運作正常
但自編核心後(從2.6.20、2.6.24、2.6.25等都試過、我有把 /boot/config-2.6.18-6-486 cp 到 /usr/src/linux/.config 然後make oldconfig 結果還是不行)啟動時都沒有任何誤,但內部就是PING 不到外部IP(SERVER 內外部都可連上)
核心設定如下:
Networking support ->Networking options --->
[*] TCP/IP networking
[*] IP: multicasting
[*] IP: advanced router


IP: Netfilter Configuration
<M> IPv4 connection tracking support (required for NAT)
[*] proc/sysctl compatibility with old connection tracking
<M> IP Userspace queueing via NETLINK (OBSOLETE)
<*> IP tables support (required for filtering/masq/NAT)
<M> "recent" match support
<M> "ecn" match support
<M> "ah" match support
<M> "ttl" match support
<M> "addrtype" address type match support
<M> Packet filtering
<M> REJECT target support
<M> LOG target support
<M> ULOG target support
<M> Full NAT
<M> MASQUERADE target support
<M> REDIRECT target support
<M> NETMAP target support
< > Basic SNMP-ALG support
<M> Packet mangling
<M> ECN target support
<M> TTL target support
<M> CLUSTERIP target support (EXPERIMENT<M> ARP payload mangling AL)
<M> raw table support (required for NOTRACK/TRAC
<M> ARP tables support E)
<M> ARP packet filtering


不知還有那些沒設到,請前輩指導一下,謝謝!!
alex140000
可愛的小學生
可愛的小學生
 
文章: 45
註冊時間: 週一 4月 12, 2004 11:58 am

文章alex140000 » 週一 4月 21, 2008 11:24 am

剛剛看了一下 lsmod 竟然看不到 ip_tables
附上相關 config


-*- Netfilter Xtables support (required for ip_tables)
<M> "CLASSIFY" target support
<M> "CONNMARK" target support
< > "DSCP" and "TOS" target support
<M> "MARK" target support
<M> "NFQUEUE" target Support
< > "NFLOG" target support
<M> "NOTRACK" target support
< > "RATEEST" target support
< > "TRACE" target support
<M> "SECMARK" target support
< > "TCPMSS" target support
< > "TCPOPTSTRIP" target support (EXPERIMENTAL)
<M> "comment" match support
<M> "connbytes" per-connection counter match support
< > "connlimit" match support"
<M> "connmark" connection mark match support
<M> "conntrack" connection tracking match support
<M> "dccp" protocol match support
< > "dscp" and "tos" match support
<M> "esp" match support
<M> "helper" match support
< > "iprange" address range match support
<M> "length" match support
<M> "limit" match support
<M> "mac" address match support
<M> "mark" match support
< > "owner" match support
<M> IPsec "policy" match support
<M> "multiport" Multiple port match support
<M> "physdev" match support
<M> "pkttype" packet type match support
<M> "quota" match support
< > "rateest" match support
<M> "realm" match support
<M> "sctp" protocol match support (EXPERIMENTAL)
<M> "state" match support
<M> "statistic" match support
<M> "string" match support
<M> "tcpmss" match support
< > "time" match support
< > "u32" match support
< > "hashlimit" match support
alex140000
可愛的小學生
可愛的小學生
 
文章: 45
註冊時間: 週一 4月 12, 2004 11:58 am

文章alex140000 » 週四 5月 29, 2008 11:11 am

原因出在 /etc/sysctl.conf
2.6.18的核心時用 net.ipv4.conf.default.forwarding=1
2.6.25的核心時用 net.ipv4.ip_forward=1
原因--個人不知道
alex140000
可愛的小學生
可愛的小學生
 
文章: 45
註冊時間: 週一 4月 12, 2004 11:58 am


回到 debian server

誰在線上

正在瀏覽這個版面的使用者:沒有註冊會員 和 1 位訪客