/etc/modules.conf

[Desquerre Yohann]

Hi all,

I'd like to automate the loading of the "ip_conntrack_ftp" module on my
gateway i suposed that i have to add the follow line to my
/etc/modules.conf file :

alias char-major-XX ip_conntrack_ftp

moreever i don't know the number i have to put to replace XX.

Is anyone got an idea ???

(you would understood that i don't understand what a char-major
is...shame on me)

Thanks

[Adam Debus]

I honestly just put

"modprobe ip_conntrack_ftp"

at the end of my /etc/rc.d/rc.local

Thanks,

Adam Debus
Linux Certified Professional, Linux Certified Administrator #447641
Network Engineer, ReachONE Internet
[e-mail]
----- Original Message ----- 
From: "Desquerre Yohann" 
To: "Mailing Fedora project - User" 
Sent: Tuesday, October 28, 2003 3:49 PM
Subject: /etc/modules.conf
> Hi all,
>
> I'd like to automate the loading of the "ip_conntrack_ftp" module on my
> gateway i suposed that i have to add the follow line to my
> /etc/modules.conf file :
>
> alias char-major-XX ip_conntrack_ftp
>
> moreever i don't know the number i have to put to replace XX.
>
> Is anyone got an idea ???
>
> (you would understood that i don't understand what a char-major
> is...shame on me)
>
> Thanks
>
> --
> fedora-list mailing list
> [e-mail]
> http://www.redhat.com/mailman/listinfo/fedora-list

[Michael Schwendt]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 29 Oct 2003 00:49:51 +0100, Desquerre Yohann wrote:
> I'd like to automate the loading of the "ip_conntrack_ftp" module on my
> gateway i suposed that i have to add the follow line to my
> /etc/modules.conf file :
>
> alias char-major-XX ip_conntrack_ftp

No. With Red Hat's more recent iptables packages, you would add the
module name to the /etc/sysconfig/iptables-config file which contains
brief instructions.
> moreever i don't know the number i have to put to replace XX.
>
> Is anyone got an idea ???

With /etc/modules.conf it would be

add above ip_tables ip_conntrack_ftp

for instance.

- --
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
>
> iD8DBQE/nwMS0iMVcrivHFQRAswgAJ9W20ikKT5bAMUdvFB2ykqCiC05tQCeKRME
> Sr3KYsbyWK9eWXH2BeLFFYc=
> =czuo
> -----END PGP SIGNATURE-----

[Christopher K. Johnson]

Michael Schwendt wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed, 29 Oct 2003 00:49:51 +0100, Desquerre Yohann wrote:
> > I'd like to automate the loading of the "ip_conntrack_ftp" module on my
> > gateway i suposed that i have to add the follow line to my
> > /etc/modules.conf file :
> >
> > alias char-major-XX ip_conntrack_ftp
>
> No. With Red Hat's more recent iptables packages, you would add the
> module name to the /etc/sysconfig/iptables-config file which contains
> brief instructions.
> > moreever i don't know the number i have to put to replace XX.
> >
> > Is anyone got an idea ???
>
> With /etc/modules.conf it would be
>
> add above ip_tables ip_conntrack_ftp
>
> for instance.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
>
> iD8DBQE/nwMS0iMVcrivHFQRAswgAJ9W20ikKT5bAMUdvFB2ykqCiC05tQCeKRME
> Sr3KYsbyWK9eWXH2BeLFFYc=
> =czuo
> -----END PGP SIGNATURE-----
>
> --
> fedora-list mailing list
> [e-mail]
> http://www.redhat.com/mailman/listinfo/fedora-list

Here's what I use, depending on where you are trying to add handling for 
ftp:

For FTP DCC (not passive) through the local system as a nat hiding 
gateway be sure to insmod ip_nat_ftp and ip_conntrack_ftp modules, which 
can be accomplished
by adding the following two lines to /etc/modules.conf

# iptables modules added for ftp through gw by snat or masquerade hidden 
systems
above iptable_nat ip_nat_ftp ip_conntrack_ftp

On an ftp server which you want clients to be able to access via passive 
FTP be
sure to insmod ip_conntrack_ftp module, which can be accomplished by 
adding the
following two lines to /etc/modules.conf

# iptables module added for passive ftp access to ftpd on local system
above ip_conntrack ip_conntrack_ftp

--
Chris

[jdow]

Wrong place. It should be in the iptables script if anywhere. It SHOULD
automatically load when needed.
{^_^}
----- Original Message ----- 
From: "Desquerre Yohann"
> Hi all,
>
> I'd like to automate the loading of the "ip_conntrack_ftp" module on my
> gateway i suposed that i have to add the follow line to my
> /etc/modules.conf file :
>
> alias char-major-XX ip_conntrack_ftp
>
> moreever i don't know the number i have to put to replace XX.
>
> Is anyone got an idea ???
>
> (you would understood that i don't understand what a char-major
> is...shame on me)

[Milan Kerslager]

On Wed, Oct 29, 2003 at 12:49:51AM +0100, Desquerre Yohann wrote:
> Hi all,
>
> I'd like to automate the loading of the "ip_conntrack_ftp" module on my
> gateway i suposed that i have to add the follow line to my
> /etc/modules.conf file :
>
> alias char-major-XX ip_conntrack_ftp
>
> moreever i don't know the number i have to put to replace XX.
>
> Is anyone got an idea ???

Put this line to /etc/modules.conf:

above ip_conntrack ip_conntrack_ftp ip_nat_ftp

[Ted Kaczmarek]

This perked my interest in that I can't even recall the last time I had
to load an iptables module. I have been using the standard redhat
convention of loading rules base from /etc/sysconfig/iptables for a long
time. Messed around with many variations of firewall scripts but most of
them were ugly to look at when iptables is running and since I have lots
of ingress/egress points of different trust levels to hard to maintain
for me anyway.

Ted
On Wed, 2003-10-29 at 01:36, Milan Kerslager wrote:
> On Wed, Oct 29, 2003 at 12:49:51AM +0100, Desquerre Yohann wrote:
> > Hi all,
> >
> > I'd like to automate the loading of the "ip_conntrack_ftp" module on my
> > gateway i suposed that i have to add the follow line to my
> > /etc/modules.conf file :
> >
> > alias char-major-XX ip_conntrack_ftp
> >
> > moreever i don't know the number i have to put to replace XX.
> >
> > Is anyone got an idea ???
>
> Put this line to /etc/modules.conf:
>
> above ip_conntrack ip_conntrack_ftp ip_nat_ftp