From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from dsl092-170-086.wdc1.dsl.speakeasy.net ([66.92.170.86] helo=cantata.rednote.net) by speech.braille.uwo.ca with esmtp (Exim 3.35 #1 (Debian)) id 18Jeqh-0004WI-00 for ; Wed, 04 Dec 2002 14:06:19 -0500 Received: from cantata.rednote.net (cantata.rednote.net [127.0.0.1]) by cantata.rednote.net (8.12.3/8.12.3/Debian -4) with ESMTP id gB4J6HUM025614 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=FAIL) for ; Wed, 4 Dec 2002 14:06:18 -0500 Received: (from janina@localhost) by cantata.rednote.net (8.12.3/8.12.3/Debian -4) id gB4J6H9m025612 for speakup@braille.uwo.ca; Wed, 4 Dec 2002 14:06:17 -0500 Date: Wed, 4 Dec 2002 14:06:17 -0500 From: Janina Sajka To: speakup@braille.uwo.ca Subject: Re: What's with this error? Message-ID: <20021204190614.GD24584@rednote.net> References: <20021203022449.GA2356@rednote.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.3.28i X-Operating-System: Linux cantata 2.4.20 Sender: speakup-admin@braille.uwo.ca Errors-To: speakup-admin@braille.uwo.ca X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.0.11 Precedence: bulk Reply-To: speakup@braille.uwo.ca List-Help: List-Post: List-Subscribe: , List-Id: Speakup is a screen review system for Linux. List-Unsubscribe: , List-Archive: For the record, here's the response from the mid-atlantic linux list that I need to check out: I should preface this by saying the experience I have with either Woody or DEC Alpha's is only slightly above none. I've got even less for apt-get & endoshield (I just write my scripts by hand). However, I do know that Netfilter -- because it's part of the kernel -- can not be updated via any sort of patch or update program (e.g. RPM or, as I understand it, apt-get.) You have to get the source & recompile your kernel to update Netfilter (the hooks in the kernel) & you'll also want to update iptables (the userland command.) Judging by your error, which mentions iptables v1.2.6a, it looks like your Netfilter/iptables needs updating (1.2.7a is current -- take a look at www.netfilter.org, they've also got some great how-to's there.) Also note that you can end up with multiple versions of iptables on the same box -- watch where you put it, and make sure to use the right one for the kernel you boot. [That one cost me a little hair first time around...] Toby Fisher writes: > From: Toby Fisher > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Mon, 2 Dec 2002, Janina Sajka wrote: > > > I'm trying to setup some firewalling rules using the endoshield script. > > This is on a DEC Alpha running Debian Woody with the 2.4.20 kernel. I'm > > fully updated based on apt-get. > > > > When I run the script I get: > > > > /lib/modules/2.4.20/kernel/net/ipv4/netfilter/ip_tables.o: insmod > > ip_tables failed > > iptables v1.2.6a: can't initialize iptables table `filter': iptables > > who? (do you need to insmod?) > > > > This happens whatever I do to /etc/init.d/iptables. -- halt, stop, > > start, etc. Actually, "start" doesn't work, complains about an "unknown > > rule set." > > > > If I try to modprobe ip_tables, I get the same error. If I try rmmod, > > I'm told it isn't loaded, and indeed, it doesn't show with lsmod. > > > > Sounds like you've got iptables compiled straight into the kernel, just > edit the script and comment out the lines that try to load the iptables > module. This is done so that people can have a system using either > iptables or ipchains. I had a similar problem, but a few comments in the > right places means that it now runs error-free. > > HTH > > - -- > Toby Fisher Email: toby@tjfisher.co.uk > Tel.: +44(0)1480 417272 Mobile: +44(0)7974 363239 > ICQ: #61744808 > Please avoid sending me Word or PowerPoint attachments. > See http://www.fsf.org/philosophy/no-word-attachments.html > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.1 (GNU/Linux) > Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/ > > iD8DBQE97M44Kl9qIwuqk+IRAvsFAJ0UXng36bRZtlxWaZOCDZnoM/uwmACfWbqj > rwl+O97Ri83j8XfWzKFXVTg= > =5ubM > -----END PGP SIGNATURE----- > > > _______________________________________________ > Speakup mailing list > Speakup@braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup -- Janina Sajka, Director Technology Research and Development Governmental Relations Group American Foundation for the Blind (AFB) Email: janina@afb.net Phone: (202) 408-8175