[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: enabling ipchains/iptables



On Fri, 14 Dec 2001, TCL wrote:

> hello
> i have slack 8 with kernel 2.4.5
> in the last week i got my modem working with linux and now is the time to set
> up a firewall ruleset

actually, the correct time to do it was *before* you got your modem to
work and connected for the first time. never underestimate the power of
the cracker with a scanner.

> i have both ipchains and iptables installed, but unfurtunally, my kernel is
> compiled with no support to both
> is it possible to enable support without recompiling the kernel?

nope.

> if not, how can i make sure all the current options compiled in the kernel
> will stay the same except for the firewall ones? i remember there was a way
> to make a config file of the current configuration, but i forgot it
> and, if i use that method, what line do i need to change?

here's what i do.
cd /path/to/old/kernel
copy .config /someplace/safe
cd /path/to/new/kernel
cp /someplace/safe/.config ./
make oldconfig [this will only ask you questions which are new to this
kernel version]
make menuconfig [now change whatever needs to be changed]

continue as usual. [dep, bzImage, etc].

note that this depends on having the .config of your current kernel. if
it's a distro kernel, you might want to take the hour or two to
reconfigure it, since distro kernels are built to suit the widest range
of hardware they might encounter - almost everything is compiled,
usuaully as modules.

-- 
mulix

http://vipe.technion.ac.il/~mulix/
http://syscalltrack.sf.net/



=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il