NetFilter
[Top] [All Lists]

Re: Dynamic kernel module load

To: Paul Harlow <pharlow@skld.com>
Subject: Re: Dynamic kernel module load
From: Martijn Lievaart <m@rtij.nl>
Date: Thu, 24 May 2007 19:08:55 +0200
Cc: Netfilter Lists <netfilter@lists.netfilter.org>
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <9875566032E2AE41ADB6D9CF037D312652F8F2@skyline.skld.net>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
References: <9875566032E2AE41ADB6D9CF037D312652F8F2@skyline.skld.net>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: Thunderbird 1.5.0.10 (X11/20070302)
Paul Harlow wrote:
Hi all,

Fedora 5 patched, i386 SMP

I am looking for info on how to dynamically load a particular kernel module 
when I restart IPTables. I have firewalling rules in place for FTP traffic 
(both passive and active) however when I restart IPTables I notice that the 
module ip_conntrack_ftp does not load, I have to load it manually. This 
presents a problem if someone other than myself has to reload firewall rules on 
this machine but isn't aware of the FTP rules/needs.

Will adding the line "ip_conntrack_ftp" to the modules.conf file solve this 
problem and leave the particular module in permanently?

Patch /etc/sysconfig/iptables-config, mine looks like:

# Additional iptables modules (nat helper)
# Default: -empty-
IPTABLES_MODULES="ip_conntrack_ftp"

(snip)

HTH,
M4



<Prev in Thread] Current Thread [Next in Thread>