[KLUG Members] ipchains

[Peter Buxton]

On Tue, Jul 24, 2001 at 07:41:31AM -0400, Tony Gettig was only 
   escaped alone to tell thee:

> On a related note (and possibly helpful to this problem), is there a way
> to extract the settings of a kernel to a file?

On a Debian install, say, /boot/config-2.2.17 (or whatever). Perhaps RH as
well?

> >>> Patrick Stockton <codejnki@earthlink.net> 07/23/01 09:56PM >>>
> Off hand does anyone know what options need to be compiled in to the
> kernel to get ipchains working??

My stock Debian kernel say:

CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_FIREWALL=y
CONFIG_IP_MASQUERADE=y
CONFIG_IP_MASQUERADE_ICMP=y
CONFIG_IP_MASQUERADE_MOD=y
CONFIG_IP_MASQUERADE_IPAUTOFW=m
CONFIG_IP_MASQUERADE_IPPORTFW=m
CONFIG_IP_MASQUERADE_MFW=m

As you can see, the three options above are modules. I'm not sure how you
turn them on (I mean, insmod, yes, but how to set them to autoload), as
firewall building is still outside my ken, but does this help?

c.f. linux-kernel_2.?.?/Documentation/Configuration*

CONFIG_NET_IPIP=m
CONFIG_NET_IPGRE=m
CONFIG_IP_ALIAS=y
CONFIG_SYN_COOKIES=y
CONFIG_INET_RARP=m