Bug#282195: kernel-image-2.6.9-1-686: module load order seems to make a difference

["Jason D. Hildebrand" <jason@peaceworks.ca>]

Package: kernel-image-2.6.9-1-686
Severity: normal
Followup-For: Bug #282195


I've noticed that if I pre-load ip_tables, ipmasq will start and initialize
all rules.  

If ip_tables is not loaded, the following code in ipmasq kicks in
(from /etc/ipmasq/rules/A00sanitycheck):

if [ ! -e /proc/net/ip_masquerade -a ! -e /proc/net/ip_tables_names ]; then
    if ! /sbin/modprobe -q iptable_nat 2>/dev/null; then
        echo "IP Masquerade has not been enabled in the kernel."
        exit 1
    fi
fi

Once it tries to load iptable_nat explicitly, ipfwadm will be loaded, which 
causes the problems.

So my workaround to get ipmasq to run correctly under 2.6.9 has been to 
replace iptable_nat by ip_tables in this snippet, like so:

if [ ! -e /proc/net/ip_masquerade -a ! -e /proc/net/ip_tables_names ]; then
    if ! /sbin/modprobe -q ip_tables 2>/dev/null; then
        echo "IP Masquerade has not been enabled in the kernel."
        exit 1
    fi
fi


peace,
Jason

-- System Information:
Debian Release: 3.0
Architecture: i386
Kernel: Linux trotzdem 2.6.9 #1 Tue Dec 14 09:30:17 CST 2004 i686
Locale: LANG=en_US, LC_CTYPE=en_US