Linux

Ask something
Discussion Locked

Firewall in RH 7.1 w/ 2.4.17 Kernel

0 helpful
9 replies

by meridian828

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

basically i would like to setup a Firewall
using IPchains with the 2.4.17 Kernel however
i can not Figure out how to make ipchains compatible with this kernel? any suggestions or thoughts on this? reason i want to use ipchains is i have a script setup for port scanning and blocking but only works w/ ipchains, thanks for your help.

9 replies

by randyarnold

Redhat 7.1 comes with both iptables and ipchains.

As root do /sbin/lsmod see if the modules iptables are loaded.

If so do /sbin/rmmod modulename

Once all the modules are removed,

do /sbin/insmod ipchains.

Randy

by meridian828

Well i tried what you told me to and it didn't list anything in the lsmod for either ipchains or iptables. perhaps i have built my Kernel incorrectly? is there anything i should change?

Mike

by meridian828

Already Set up that way, i get the
"ipchains is incompatible with this Kernel"

So i dunno?! thanks though i've been trying!!

by rossiter

It's my understanding that "ipchains" was the tool of choice for the 2.2 kernel. But ipchains was re-written as iptables in the 2.4 kernel.

You're much better off using iptables IMHO, just spend some time at http://www.linuxguruz.org/iptables and you'll be good to go in no time :)

HTH,
Eric

by shanghai sam

Find someone with a fast connection and get a
newer kernel. I wasn't terribly pleased with
that one.
IPTables is so much better from a security
standpoint that I find it difficult to believe
that you need that utility.
First of all, you define which ports are active.
Second: you define the availability of ser-
vices.
Third: You define |with precision| what comes in
and what goes out. (Forwarding,Masquerade,and etc.)
Fourth: You define what protocols are accepted.
Fifth: You define the addresess and even the users & applications |specific| permissions.
Sixth: You define the packets, headers and #s
of packets for users, services and applications.

Seventh: YOU DEFINE WHAT IS LOGGED! Where to
send logs, how long to keep them, and what info.
to put in them.

IPTables (Well, the whole shebang.) Was rewritten
for speed, memory use and stability. Go out and get the newest stable version. Take the time to
do it thoroughly and you won't be disappointed.

This discussion is closed to new replies.