Re: Red Hat 7.2 and example firewall script

["Mike A. Harris" <mharris redhat com>]

On Sun, 2 Dec 2001, SainTiss wrote:

>> You have to load the ipchains kernel module via modprobe before
>> using ipchains.
>>
>> In 7.1, due to a bug, the ipchains module got loaded by accident
>> automatically.
>
>
>i'm using iptables as a firewall, and I'm quite sure no modprobe is being 
>done to bring up the iptables module... so I think it's loaded automatically 
>when I run my iptables script...
>Is that a bug as well then?

Something has to load the modules before iptables will work.  It
is not done automatically by the kernel.  If you're using the
supplied iptables initscript and iptables config in
/etc/sysconfig, then it is working as expected I presume since 
the iptables initscvript will load what is necessary.

If the iptables initscript loads the kernel modules when no 
/etc/sysconfig/iptables firewall is configured, I would consider 
that a bug in the initscript also, although it is not as big of a 
potential problem as the ipchains initscript bug that was fixed.  

I'll have to analyze the iptables initscript to be sure though.


-- 
----------------------------------------------------------------------
Mike A. Harris                  Shipping/mailing address:
OS Systems Engineer             190 Pittsburgh Ave., Sault Ste. Marie,
XFree86 maintainer              Ontario, Canada, P6C 5B3
Red Hat Inc.                    Phone: (705)949-2136
http://www.redhat.com           ftp://people.redhat.com/mharris
Red Hat XFree86 mailing list:   xfree86-list redhat com
General open IRC discussion:    #xfree86 on irc.openprojects.net
----------------------------------------------------------------------