Netfilter Modules

Edward edward at tripled.iinet.net.au
Tue Aug 24 02:46:12 UTC 2004


Just a quick question - I haven't seen this answered yet but if I've 
missed it I'm sorry.

I have in my firewall script the following lines (amongst others which 
don't affect the problem):

$DEPMOD -a
$INSMOD ip_tables
$INSMOD ip_conntrack
$INSMOD ip_conntrack_ftp
$INSMOD ip_conntrack_irc
$INSMOD iptable_nat
$INSMOD ip_nat_ftp

(Ofcourse the $DEPMOD and $INSMOD variables are set earlier in the 
script). I've always needed to do it this way since as long as I can 
remember to get FTP and IRC to work properly.

After upgrading to FC2, I've noticed the following generated in 
/var/log/messages when the script is run:

Aug 24 06:42:38 server kernel: ip_conntrack version 2.1 (1535 buckets, 
12280 max) - 296 bytes per conntrack
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_ct_selective_cleanup
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol invert_tuplepr
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_ct_gather_frags
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_conntrack_untracked
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol ip_conntrack_get
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_conntrack_htable_size
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_conntrack_destroyed
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
__ip_ct_find_proto
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol need_ip_conntrack
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_conntrack_tuple_taken
Aug 24 06:42:38 server kernel: iptable_nat: Unknown symbol 
ip_conntrack_alter_reply
Aug 24 06:42:38 server modprobe: FATAL: Error inserting iptable_nat 
(/lib/modules/2.6.6-1.435.2.3/kernel/net/ipv4/netfilter/iptable_nat.ko): 
Unknown symbol in module, or unknown parameter (see dmesg)

It looks like a module mismatch to me? Anybody have an idea? 
ip_conntrack seems OK, but why is it spewing at iptable_nat? Is it even 
needed?

Also, if there is TFM to R, then please tell me where, I'm happy to 
spend some time discovering by myself.

Regards,
Ed.





More information about the users mailing list