[pptp-server] pptp masquerade document needed for 2.4.x basedfirewal

robert berzerke at swbell.net
Mon Jul 16 23:18:05 CDT 2001


Ipchains and Iptables are not compatible with each other.  If you have both 
compiled as modules, whichever one you use first will load automatically, 
then lock the other out.  The easiest way I've found to fix this is manually 
(as in rmmod) unload the ipchains module(s).  Then the iptables will load.

Of course, I've switched over completely to iptables, so this is no longer a 
problem for me. ;^)

On Monday 16 July 2001 22:34, Craig Morris wrote:
> Thanks for your response,
>
> Here is the output from modprobe:
>
> modprobe -v iptable_nat
> /sbin/insmod
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o
> Using /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o
> Symbol version prefix ''
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o:
> init_module: Device or resource busy
> Hint: insmod errors can be caused by incorrect module parameters,
> including invalid IO or IRQ parameters
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o: insmod
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o failed
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o: insmod
> iptable_nat failed
>
> And here are the currently loaded modules:
>
> [root at shockwave init.d]# lsmod
> Module                  Size  Used by
> ne2k-pci                4096   2  (autoclean)
> 8390                    5632   0  (autoclean) [ne2k-pci]
> ipchains               27648   0  (unused)
>
> I'm still using ipchains instead of iptables, although I'm not sure if
> it makes any difference.
>
> Thanks,
>
> Craig Morris
>
> Jamin Collins wrote:
> > Craig Morris [mailto:craig at amalgam.ca] wrote:
> > > Could anyone direct me to a comprehensive document outlining the
> > > requirements/setup instructions for masquerading pptp using a linux
> > > 2.4.x based firewall.  So far I've found mostly out-of-date how-to's
> > > that covered 2.2.x based kernels.
> > >
> > > The only document I've found that really mentions 2.4.x is the
> > > following:
> > >
> > > ftp://ftp.rubyriver.com/pub/jhardin/masquerade/ip_masq_vpn.html
> > >
> > > Unfortunately, the modules listed failed to load on my system (RH7.1
> > > running 2.4.3-12).
> >
> > Actually, little more than the correct rules are necessary.  I've got
> > three firewalls all running 2.4.5 kernels and I haven't needed to apply
> > any special patches or explicitly load any special modules (although, I'm
> > sure modules are loading for this).  Perhaps if you can be more specific
> > about how it doesn't work, or what error messages you are getting we may
> > be able to help.
> >
> > Jamin W. Collins
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > --- To unsubscribe, go to the url just above this line. --
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --



More information about the pptp-server mailing list