To clarify, several kernels ago the IPV4 iptables was defaulted to being built into the kernel so it doesn't need a modprobe or insmod. Ditto with the IPV4 conntrack (snippet of the default kernel config file):
CONFIG_NF_DEFRAG_IPV4=y <<<---- Built into kernel CONFIG_NF_CONNTRACK_IPV4=y <<<---- Built into kernel # CONFIG_NF_CONNTRACK_PROC_COMPAT is not set CONFIG_IP_NF_QUEUE=m <<<---- Module CONFIG_IP_NF_IPTABLES=y <<<---- Built into kernel
So remove those items from your /etc/modprobe.conf file. It is also not necessary to modprobe things like the NAT module and such...if there are rules in your iptables config that require them, they'll be drug in by iptables itself. The "modprobe"able modules can be found by doing a
ls /lib/modules/`uname -r`/kernel/net/ipv4/netfilter
Would you mind to tell me how to apply the following iptables module into FC11 System ? ip_nat_ftp ip_conntrack_ftp
It seems to me that there has been an email pointing out that ip_conntrack_ftp has been replaced by nf_conntrack_ftp and ip_nat_ftp by nf_nat_ftp.