ipchains - two steps forward - one step sideways };-)
Jule, updating your kernel is a very simple matter with the tools you
have at hand. You may certainly reinstall Woody from the b2.4 floppies
if you like or give miniwoody a try. Miniwoody is a CD ISO which uses
the bf2.4 floppies as a boot medium (kind of, it's still a CD) and then
does most of the install via CD, just going to the net to get "optional"
stuff. The miniwoody distribution can be found at:
http://developer.berlios.de/projects/bonzai/
I think the easiest method would have to be using apt-get to install a
new kernel though. You will have to do this as root. In my case, I run
an athlon machine so I would type the following:
apt-get install kernel-image-2-4.18-k7
If you are running a Celeron or pentium X or a different AMD then the
last spec (k7) will change.
Here are the other varieties available:
386 - kernel-image-2.4.18-386
pentium classic - kernel-image-2.4.18-586tsc
PPro/Celeron/PII/PIII/PIV - kernel-image-2.4.18-686
PPro/Celeron/PII/PIII/PIV SMP - kernel-image-2.4.18-686-smp
AMD K6/K6-II/K6-III - kernel-image-2.4.18-k6
Unless you want to get kernel source and compile, the latest version you
can get from debian (easily) is 2.4.18. You can certainly try changing
you apt sources.list but that can be very tricky. The 2.4.18 kernel
should meet your needs. Having said that, sooner or later you will get
the kernel source and start hacking, everyone does... };-)
Generally, the kernel used by default is the one for the 386, very
generic and not optimized for you CPU. Then again, very safe.
So, anyway, after a few minutes you should have a newly installed kernel
image. Now, be careful, your existing lilo.conf file probably does not
have support for a "init.rd" (initial RAM disk). Debconf will tell you
this and will tell you how to edit your lilo.conf to make sure your new
kernel is going to work. PAY VERY CLOSE ATTENTION HERE! you are making
changes to lilo, be careful.
With a new kernel in place I think you will have better luck with your
IPTABLES (now) question. I haven't used IPCHAINS for about a year and
half and as such I can no longer help you as I just don't remember
anymore.
This should help to get you going.
John
On Wed, 2003-06-18 at 06:14, Jule Slootbeek wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I'm running 2.2.20 which came with Debian 3.0r1.
> I just find it strange, because every HOWTO i read tells me it's easy to do,
> and here's i'm trying to figure it out for 4 days.
> I don't really know what's wrong maybe i should switch to a distribution that
> runs 2.4.x by default, and use iptables, anybody know of any? Does Sid run
> 2.4.x off the bat?
>
> Jule
>
> On Wednesday 18 June 2003 01:25, Tarragon Allen wrote:
> > On Wednesday 18 June 2003 12:39, Jule Slootbeek wrote:
> > > i cannot get the client to connect to anything farther than the server.
> > > any/more help would be appreciated
> > >
> > > Jule
> > >
> > > ps. my ipchain rules are (gathered from the previous emails)
> > >
> > > -P forward DENY
> > > -A forward -i eth0 -j MASQ
> >
> > What version of the kernel are you using?
> >
> > From memory, ipchains requires an additional package to be installed to
> > allow masquerading to work (at least it did under RedHat). If you're using
> > a 2.4 series kernel, you really should be using iptables (aka netfilter).
> > I'm not sure the ipchains backwards compatability in netfilter handles
> > masquerading..
> >
> > t
> > --
> > GPG: http://n12turbo.com/tarragon/public.key
>
> - --
> Jule Slootbeek
> jslootbeek@clarku.edu
> 617 901 6958
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2 (GNU/Linux)
>
> iD8DBQE+8FepQkskRvXpytsRAj4xAKCDd9bkY49NNNdEPoGb44QKWzP4nACeLkRV
> s6254DHPPRzcVWc3jIW+q8E=
> =OdwC
> -----END PGP SIGNATURE-----
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: