ts-7000
[Top] [All Lists]

Re: [ts-7000] Re: netfilter and iptables for TS-7370

To:
Subject: Re: [ts-7000] Re: netfilter and iptables for TS-7370
From: Don Tucker <>
Date: Tue, 15 Nov 2011 14:11:03 -0600
I didn't have to manually load any modules in order to run iptables.
Invoking iptables loaded all of the necessary modules.

What was the result when you ran "depmod -a -F System.map" on the
TS-7370 with the new System.map file generated from the kernel rebuild?

Don

On 11/14/2011 10:12 PM, jarrett_aig wrote:

These are the modules that I have built. What is the order to load
them into the kernel. So far I have used insmod and loaded
x_tables.ko, ip_tables.ko and iptables_filter.ko.

INSTALL net/ipv4/netfilter/arp_tables.ko
INSTALL net/ipv4/netfilter/arpt_mangle.ko
INSTALL net/ipv4/netfilter/arptable_filter.ko
INSTALL net/ipv4/netfilter/ip_conntrack.ko
INSTALL net/ipv4/netfilter/ip_conntrack_amanda.ko
INSTALL net/ipv4/netfilter/ip_conntrack_ftp.ko
INSTALL net/ipv4/netfilter/ip_conntrack_h323.ko
INSTALL net/ipv4/netfilter/ip_conntrack_irc.ko
INSTALL net/ipv4/netfilter/ip_conntrack_netlink.ko
INSTALL net/ipv4/netfilter/ip_conntrack_pptp.ko
INSTALL net/ipv4/netfilter/ip_conntrack_proto_sctp.ko
INSTALL net/ipv4/netfilter/ip_conntrack_sip.ko
INSTALL net/ipv4/netfilter/ip_conntrack_tftp.ko
INSTALL net/ipv4/netfilter/ip_nat.ko
INSTALL net/ipv4/netfilter/ip_nat_amanda.ko
INSTALL net/ipv4/netfilter/ip_nat_ftp.ko
INSTALL net/ipv4/netfilter/ip_nat_h323.ko
INSTALL net/ipv4/netfilter/ip_nat_irc.ko
INSTALL net/ipv4/netfilter/ip_nat_pptp.ko
INSTALL net/ipv4/netfilter/ip_nat_sip.ko
INSTALL net/ipv4/netfilter/ip_nat_snmp_basic.ko
INSTALL net/ipv4/netfilter/ip_nat_tftp.ko
INSTALL net/ipv4/netfilter/ip_tables.ko
INSTALL net/ipv4/netfilter/ipt_CLUSTERIP.ko
INSTALL net/ipv4/netfilter/ipt_ECN.ko
INSTALL net/ipv4/netfilter/ipt_LOG.ko
INSTALL net/ipv4/netfilter/ipt_MASQUERADE.ko
INSTALL net/ipv4/netfilter/ipt_NETMAP.ko
INSTALL net/ipv4/netfilter/ipt_REDIRECT.ko
INSTALL net/ipv4/netfilter/ipt_REJECT.ko
INSTALL net/ipv4/netfilter/ipt_SAME.ko
INSTALL net/ipv4/netfilter/ipt_TOS.ko
INSTALL net/ipv4/netfilter/ipt_TTL.ko
INSTALL net/ipv4/netfilter/ipt_ULOG.ko
INSTALL net/ipv4/netfilter/ipt_addrtype.ko
INSTALL net/ipv4/netfilter/ipt_ah.ko
INSTALL net/ipv4/netfilter/ipt_ecn.ko
INSTALL net/ipv4/netfilter/ipt_iprange.ko
INSTALL net/ipv4/netfilter/ipt_owner.ko
INSTALL net/ipv4/netfilter/ipt_recent.ko
INSTALL net/ipv4/netfilter/ipt_tos.ko
INSTALL net/ipv4/netfilter/ipt_ttl.ko
INSTALL net/ipv4/netfilter/iptable_filter.ko
INSTALL net/ipv4/netfilter/iptable_mangle.ko
INSTALL net/ipv4/netfilter/iptable_nat.ko
INSTALL net/ipv4/netfilter/iptable_raw.ko
INSTALL net/ipv4/tcp_diag.ko
INSTALL net/netfilter/nfnetlink.ko
INSTALL net/netfilter/nfnetlink_log.ko
INSTALL net/netfilter/nfnetlink_queue.ko
INSTALL net/netfilter/x_tables.ko
INSTALL net/netfilter/xt_CLASSIFY.ko
INSTALL net/netfilter/xt_CONNMARK.ko
INSTALL net/netfilter/xt_DSCP.ko
INSTALL net/netfilter/xt_MARK.ko
INSTALL net/netfilter/xt_NFLOG.ko
INSTALL net/netfilter/xt_NFQUEUE.ko
INSTALL net/netfilter/xt_NOTRACK.ko
INSTALL net/netfilter/xt_TCPMSS.ko
INSTALL net/netfilter/xt_comment.ko
INSTALL net/netfilter/xt_connbytes.ko
INSTALL net/netfilter/xt_connmark.ko
INSTALL net/netfilter/xt_conntrack.ko
INSTALL net/netfilter/xt_dccp.ko
INSTALL net/netfilter/xt_dscp.ko
INSTALL net/netfilter/xt_esp.ko
INSTALL net/netfilter/xt_hashlimit.ko
INSTALL net/netfilter/xt_helper.ko
INSTALL net/netfilter/xt_length.ko
INSTALL net/netfilter/xt_limit.ko
INSTALL net/netfilter/xt_mac.ko
INSTALL net/netfilter/xt_mark.ko
INSTALL net/netfilter/xt_multiport.ko
INSTALL net/netfilter/xt_pkttype.ko
INSTALL net/netfilter/xt_quota.ko
INSTALL net/netfilter/xt_realm.ko
INSTALL net/netfilter/xt_sctp.ko
INSTALL net/netfilter/xt_state.ko
INSTALL net/netfilter/xt_statistic.ko
INSTALL net/netfilter/xt_string.ko
INSTALL net/netfilter/xt_tcpmss.ko
INSTALL net/netfilter/xt_tcpudp.ko

I have tried loading in the following modules and still there is a
invalid parameter for 'filter'

Module Size Used by
arptable_filter 1760 0
arp_tables 9640 1 arptable_filter
ipt_LOG 5728 0
ipt_REJECT 3392 0
iptable_filter 2368 0
ip_tables 10952 1 iptable_filter
ip_conntrack 48436 0
xt_realm 1472 0
xt_pkttype 1664 0
xt_multiport 3072 0
xt_mac 1696 0
xt_mark 1664 0
x_tables 12548 9
arp_tables,ipt_LOG,ipt_REJECT,ip_tables,xt_realm,xt_pkttype,xt_multiport,xt_mac,xt_mark
nfnetlink_log 9544 0
nfnetlink_queue 10112 0
nfnetlink 5432 3 ip_conntrack,nfnetlink_log,nfnetlink_queue

--- In  <ts-7000%40yahoogroups.com>, Don
Tucker <> wrote:
>
> I think you need to enable more modules than just CONFIG_NETFILTER in
> order to use iptables. I remember experimenting with this and Googling
> quite a bit before finding a configuration that would work. If you are
> using the menu-driven configuration utility for your kernel config
file,
> look at also enabling modules under
>
> Core Netfilter Configuration
> IP: Netfilter Configuration (particularly CONFIG_IP_NF_IPTABLES)
>
> Don
> On 11/13/2011 12:39 PM, Walter Marvin wrote:
> > Did you physically install the module on the target machine?
> >
> > ----------------------------------------------------------
> > *From:* jarrett_aig <>
> > *To:*  <ts-7000%40yahoogroups.com>
> > *Sent:* Friday, November 11, 2011 11:22 PM
> > *Subject:* [ts-7000] netfilter and iptables for TS-7370
> >
> > Hi,
> >
> > I have been struggling to get iptables working on the ts-7370. From
> > looking through most of the messages, I have tried compiling a custom
> > kernel with CONFIG_NETFILTER=y in the ts7350_defconfig file. I have
> > build the modules x_tables.ko, ip_tables.ko etc..
> >
> > I have used insmod to add the above modules, here a print out of the
> > lsmod.
> > Module Size Used by
> > iptable_filter 2368 0
> > ip_tables 11304 1 iptable_filter
> > x_tables 12548 1 ip_tables
> > usbhid 16036 0
> > hid 25952 1 usbhid
> > fbcon 40472 0
> > font 7968 1 fbcon
> > bitblit 4672 1 fbcon
> > softcursor 1632 1 bitblit
> > ts7370fb 5732 0
> > zd1211rw 49540 0
> > firmware_class 7552 1 zd1211rw
> > ieee80211softmac 27456 1 zd1211rw
> > ieee80211 29412 2 zd1211rw,ieee80211softmac
> > ieee80211_crypt 4832 1 ieee80211
> > ext3 108072 0
> > jbd 57320 1 ext3
> > vfat 10720 0
> > fat 46204 1 vfat
> > usb_storage 35044 0
> > sd_mod 15664 0
> > scsi_mod 86820 2 usb_storage,sd_mod
> > ohci_hcd 27304 0
> > usbcore 121500 5 usbhid,zd1211rw,usb_storage,ohci_hcd
> > ax88796b_ts7370 12584 0
> > 8250 20696 0
> > tsdev 6688 0
> > mousedev 10144 0
> > ts_lcd 8000 0
> > evdev 8096 0
> > ts72xx_wdt 5296 0
> > tsuart1 13868 0
> > xuart7350 23636 0
> > tssdcard 31836 2
> >
> > I get the following error when running iptables -L
> > FATAL: Module ip_tables not found.
> > iptables v1.3.6: can't initialize iptables table `filter': Invalid
> > argument
> > Perhaps iptables or your kernel needs to be upgraded.
> >
> > Not sure what to try next, possibly building iptables from source?
> > Any help will be greatly appreciated.
> >
> > Thanks
> >
> >
> >
> >
> >
>



Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

<Prev in Thread] Current Thread [Next in Thread>
Admin

Disclaimer: Neither Andrew Taylor nor the University of NSW School of Computer and Engineering take any responsibility for the contents of this archive. It is purely a compilation of material sent by many people to the birding-aus mailing list. It has not been checked for accuracy nor its content verified in any way. If you wish to get material removed from the archive or have other queries about the archive e-mail Andrew Taylor at this address: andrewt@cse.unsw.EDU.AU