General :: How Many Firewall Chains Are Supported By Kernel
Oct 20, 2010just wanna ask how many firewall chains are supported by kernel? and what are there..?
View 1 Repliesjust wanna ask how many firewall chains are supported by kernel? and what are there..?
View 1 RepliesAn error occured when I install my r8101 dirver. I have got the message:
/home/driver/r8101/src/r8101_n.c:1: error: code model 'kernel' not supported in the 32 bit mode
/home/driver/r8101/src/r8101_n.c:1: sorry, unimplemented: 64-bit mode not compiled in
make[3]: *** [/home/driver/r8101/src/r8101_n.o] Error 1
[Code]......
i heard many times the words tool chain , cross platform compiling , cross platform building etc ...
i can use the tool chain for All Linux OS ...?
Is it possible to only view certain chains and more specifically certain chain policies with options when doing: iptables -L..I would like for example view FORWARD ACCEPT rules instead of waiting for all of the drop rules to load when viewing a firewalled iptables.
View 1 Replies View Relatedi have an error on my ubuntu 10.10 server which kinda annoying, below is the error:
firewall kernel: [ 1814.159992] skge 0000:01:0d.0: PCI error cmd=0x157 status=0xc2b0
it keeps on coming. but ICS is ok without any problem just this error
I am trying to install set up of wanpipe for E1/T1 card. First of all downloaded the source code from [URL] and did all step needed for rpmbuild and copy the source code into /usr/src/kernels. Below is kernel information uname -r 2.6.18-194.3.1.el5
rpm -q kernel-devel
kernel-devel-2.6.18-194.3.1.el5
uname -a
Linux localhost.localdomain 2.6.18-194.3.1.el5 #1 SMP Thu May 13 13:09:10 EDT 2010 i686 i686 i386 GNU/Linux
Now point is when I run the ./Setup install for wanpipe its ask for path of kernel source which is present in /usr/src/kernels. its show : Kernel source 2.6.18-prep in /usr/src/kernels/kernel-2.6.18/linux-2.6.18.i686 is not supported! and set up is halted.So can somebody guide me why kernel source is not supported.
Just upgraded my kernel to 2.6.35 and now my broadcom 57780 WLAN card is not recognized. Trying to reload the proprietary driver fails. Anybody else with this specific card got it working on 2.6.35?
View 1 Replies View Relatedand also I need to find answers for following two questions.How to find mountable devices and their device files in Linux?How can I allow a regular user to mount a device in Linux?
View 2 Replies View RelatedI read somewhere that if you run nVIDIA, that a PAE kernel won't work with it. Not supported, IIRC... Any truth to this? - My linux is (so it seems anyway) OK & I'd rather not mess it up. But I WOULD like to "use" all 4G of memory I have.
View 11 Replies View RelatedThe microdia driver although notprovided by the manufacturer or ubuntu was available online and supported upto 9.10...but not instead of supporting it natively the support has been completely removed...i am able to compile the driver but it doesnt get inserteda complaint was also made on the launchpad bugs section and the ubuntu brainstorm page also but no action seems to have taken.....
View 1 Replies View RelatedI looked some new motherboards and most of them has these audio chips:
AUDIO: VT1708B
AUDIO: Realtek ALC1200
AUDIO: Realtek ALC800
how can I check, if they are supported in kernel 2.6.30? I looked at alsa page, and no information I have seen there. oldcpu, as I understund you, is not so important what audio chip is, but it is important to determine what hardware audio codec a device has, right? Let?s see Realtek ALC889 In realtek page: Realtek I can see details.
Looking at getting a new laptop for some of the guys in my office, but trying to figure out if any of these wireless cards will be supported by the kernel, hoping not to do any serious kernel hacking to get them working. The cards are
- Intel Centrino Advanced-N 6205 802.11a/b/g/n
- Intel Centrino Ultimate-N 6300 802.11a/b/g/n
- Dell Wireless 1501 802.11b/g/n
- Dell Wireless 1530 802.11a/g/n
If any one has experience with those cards being supported let me know, or if you know where i can find the drivers for them that'd rock too.
I am looking to buy my own unlocked/never-locked mobile broadband modem, and I want it to work well on my 64-bit 10.04 Ubuntu system (triple-booting MacBook 4,1). Is there a list of mobile broadband modems supported in the linux kernel out there somewhere? I did try to find one myself, but no luck. The Huawei E220 looks good, but it is discontinued.
View 2 Replies View RelatedHow would you remove all iptable rules and chains?
View 2 Replies View RelatedI have just upgraded to 11.3 and work in icewm (I have kde apps installed but no other desktops). When I boot up the computer it gives me this console error message:
Code:
kernel: [time] sisfb: Mode 'none' not supported anymore. Using default.
kernel: [time] sisfb: Fatal error: Unable to reserve 16MB framebuffer memory
kernel: [time] sisfb: Is there another framebuffer driver active?
Apart from that I'm not exactly sure what the problem is. The computer isn't displaying immediate symptoms to me. I checked the hardware sticky and when I have a few hours I can work through
HTML Code:
http://en.opensuse.org/SDB:Configuring_graphics_cards but I don't have that kind of time at the moment, so I wanted to check that that was the route I should be going down before I did. I googled this stuff but everything seems to start from a knowledge base above mine and leaves me clueless.
When there is an exploit in the kernal, can the iptables firewall get bypass? If yes,how do you know? Otherwise how can you find out.
View 9 Replies View RelatedWhat commands do you use to set the INPUT, OUTPUT, and FORWARD chains in iptables to ACCEPT?
View 5 Replies View RelatedI've read the instruction about setting up the iptables rules to filter all port except HTTP, SSH, FTP. I require first remove all default iptables rules and set default rules to all chains as DROP:
# Set default-deny policies for all three default chains
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
$IPTABLES -P OUTPUT DROP
Then allow only some ports:
#Accept inbound packets that are part of previously-OK'ed sessions
$IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED,RELATED
# Accept inbound packets which initiate SSH sessions
$IPTABLES -A INPUT -p tcp -j ACCEPT --dport 22 -m state --state NEW
# Accept inbound packets which initiate FTP sessions
$IPTABLES -A INPUT -p tcp -j ACCEPT --dport 21 -m state --state NEW
# Accept inbound packets which initiate HTTP sessions
$IPTABLES -A INPUT -p tcp -j ACCEPT --dport 80 -m state --state NEW
# Log anything not accepted above $IPTABLES -A INPUT -j LOG --log-prefix "Dropped by default:"
But I hired a VPS from other country so the only mean I can manage it is via SSH. If I setup the default rule to DROP first, I afraid that I can no longer connect via SSH to tell iptables allow SSH
So my question is:
- Does the IP tables take effect immediately after I input a rule?
- Is there any mean to run this as a batch job (create a script and run all these rules one time).
- My VPS has a web control panel which have a terminal via web. Is this a native terminal or just a connection via port 80 or 22?
I want to simplify some of my rules, so I want to create rules for certain services like xmpp, web, etc. since some of them use multiple ports, and I toggle them on/off a lot. Can I simply put the jump to rule clauses in the Input chain, and once the sub chains run, does it return to the input chain after the jump to rule clause? I want to do this so I don't have a ton of rules in the input chain. I think that if I simply make a list of all the rules to jump to in the input chain, it will work itself through all of them until it finds a matching filter in one of them correct?
View 9 Replies View RelatedIn 10.04 I was using the following commands to mount an encrypted disk image:
Code: sudo losetup -f Which tells what loop back device block is available Then I'd type:
Code: sudo losetup -e aes /dev/loop0 /home/user/crypt.img and then enter the device's password
Code: sudo mount -t ext4 /dev/loop0 /media/crypt I've tried this in 10.10 and it hasn't been working (I can't remember if I did anything in 10.04 to make it work). I've installed the loop-aes-utils package and restarted my machine. Every time I try the 2nd step, after entering the password I get: Code: ioctl: LOOP_SET_STATUS: Invalid argument, requested cipher or key length (128 bits) not supported by kernel
how to know the Hardware list by kernel supported?
View 1 Replies View RelatedI suspect this is an initial configuration bug. All firewall logs seem to be going to all
three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
IP : 192.168.2.1 ,
gateway : blank
dns1 : blank
dns2 : blank
sys2 firewall ,IPTABLES )
code....
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
I'm trying to build firewall on Debian with 'Firewall Builder'. But it won't let me compile and run unless one interface is set as management. There are two interfaces on my computer: 'eth0' and 'lo'
I don't want to be able to configure firewall remotely, so could I use 'lo' as 'management interface'?
Can we use iptables as firewall instead of Juniper firewall
View 2 Replies View RelatedSomeone told me that FC6 is outdated and no longer supported, So which version of linux should I choice?
View 2 Replies View Relatedi would like to know the list of browser's that fedora 12 supports (except firefox).i had installed opera 10.5 and it give me an error message kernel just crashed and restarts!i dont think so opera 10.5 is That stable with fedora, works properly in xp though.neways do tell me some browsers that can run smoothly in fedora
View 4 Replies View RelatedWhen I open gedit and also some other applications, I get this message:(gedit:29595): Gtk-WARNING **: Locale not supported by C library.Using the fallback 'C' locale.Why is this happening and should I worry about it? It does not seem to affect my subsequent work.
View 8 Replies View RelatedI'm trying to connect to a wep network. The password is very long and contains spaces. Someone wrote that this might be a solution: 'The key to gaining authentication against WEP is to see what hexi-string the router has on itself. I copied the string off my sister's, and now I use that string as my authentication, with the help of the iwconfig command.' What is the iwconfig command? And how exactly do you go on with this?
View 11 Replies View RelatedThe command and error message:
gtwy ~ # ip rule add from 64.251.23.186 table t1
RTNETLINK answers: Operation not supported
Older article of the same problem, but it did not help me: http://forums.gentoo.org/viewtopic-t-696982-start-0-postdays-0-postorder-asc-highlight-.html
I have looked on google at great lengths to try to find a solution. It seems that my kernel configuration is missing something? My system/kernel is: 2.6.36-gentoo-r5 #3 SMP Thu Jan 13 10:49:06 EST 2011 x86_64 Intel(R) Xeon(R) CPU X3220 @ 2.40GHz GenuineIntel GNU/Linux.I am posting this on SuperUser since this system is used as a workstation and this problem is unrelated to specific tasks that are handled exclusively by servers.iproute2 is installed:
gtwy etc # emerge --search iproute2
Searching...
[ Results for search key : iproute2 ]
[ Applications found : 1 ]
[code]...