mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-24 08:33:40 +01:00
141 lines
4.6 KiB
HTML
141 lines
4.6 KiB
HTML
|
<html>
|
|||
|
|
|
|||
|
|
<head>
|
|||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
|
|||
|
|
<title>Shorewall Kernel Configuration</title>
|
|||
|
|
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
|
|||
|
|
<meta name="ProgId" content="FrontPage.Editor.Document">
|
|||
|
|
<meta name="Microsoft Theme" content="boldstri 011, default">
|
|||
|
|
</head>
|
|||
|
|
|
|||
|
|
<body>
|
|||
|
|
<h1 align="center">Kernel Configuration</h1>
|
|||
|
|
<p>For information regarding configuring and building GNU/Linux kernels, see <a href="http://www.kernelnewbies.org">http://www.kernelnewbies.org</a>.</p>
|
|||
|
|
<p>Here's a screen shot of my Network Options Configuration:</p>
|
|||
|
|
<blockquote>
|
|||
|
|
<p> <img border="0" src="images/netopts.jpg" width="609" height="842"></p>
|
|||
|
|
</blockquote>
|
|||
|
|
<p>While not all of the options that I've selected are required, they should be
|
|||
|
|
sufficient for most applications. Here's an excerpt from the corresponding .config
|
|||
|
|
file (Note: If you are running a kernel older than 2.4.17, be sure to select
|
|||
|
|
CONFIG_NETLINK and CONFIG_RTNETLINK):</p>
|
|||
|
|
|
|||
|
|
<blockquote>
|
|||
|
|
<font SIZE="2">
|
|||
|
|
<p>#<br>
|
|||
|
|
# Networking options<br>
|
|||
|
|
#<br>
|
|||
|
|
CONFIG_PACKET=y<br>
|
|||
|
|
# CONFIG_PACKET_MMAP is not set<br>
|
|||
|
|
# CONFIG_NETLINK_DEV is not set<br>
|
|||
|
|
CONFIG_NETFILTER=y<br>
|
|||
|
|
CONFIG_NETFILTER_DEBUG=y<br>
|
|||
|
|
CONFIG_FILTER=y<br>
|
|||
|
|
CONFIG_UNIX=y<br>
|
|||
|
|
CONFIG_INET=y<br>
|
|||
|
|
CONFIG_IP_MULTICAST=y<br>
|
|||
|
|
CONFIG_IP_ADVANCED_ROUTER=y<br>
|
|||
|
|
CONFIG_IP_MULTIPLE_TABLES=y<br>
|
|||
|
|
CONFIG_IP_ROUTE_FWMARK=y<br>
|
|||
|
|
CONFIG_IP_ROUTE_NAT=y<br>
|
|||
|
|
CONFIG_IP_ROUTE_MULTIPATH=y<br>
|
|||
|
|
CONFIG_IP_ROUTE_TOS=y<br>
|
|||
|
|
CONFIG_IP_ROUTE_VERBOSE=y<br>
|
|||
|
|
# CONFIG_IP_ROUTE_LARGE_TABLES is not set<br>
|
|||
|
|
# CONFIG_IP_PNP is not set<br>
|
|||
|
|
CONFIG_NET_IPIP=m<br>
|
|||
|
|
CONFIG_NET_IPGRE=m<br>
|
|||
|
|
# CONFIG_NET_IPGRE_GROADCAST is not set<br>
|
|||
|
|
# CONFIG_IP_MROUTE is not set<br>
|
|||
|
|
# CONFIG_ARPD is not set<br>
|
|||
|
|
CONFIG_INET_ECN=y<br>
|
|||
|
|
CONFIG_SYN_COOKIES=y</p>
|
|||
|
|
</font>
|
|||
|
|
</blockquote>
|
|||
|
|
|
|||
|
|
<p>Here's a screen shot of my Netfilter configuration:</p>
|
|||
|
|
<blockquote>
|
|||
|
|
|
|||
|
|
<p><img border="0" src="images/menuconfig.jpg" width="609" height="842"></p>
|
|||
|
|
</blockquote>
|
|||
|
|
|
|||
|
|
<p>Here's an excerpt from the corresponding .config file.</p>
|
|||
|
|
<blockquote>
|
|||
|
|
<p><font size="2">#<br>
|
|||
|
|
# IP: Netfilter Configuration<br>
|
|||
|
|
#<br>
|
|||
|
|
CONFIG_IP_NF_CONNTRACK=y<br>
|
|||
|
|
CONFIG_IP_NF_FTP=m<br>
|
|||
|
|
# CONFIG_IP_NF_QUEUE is not set<br>
|
|||
|
|
CONFIG_IP_NF_IPTABLES=y<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_LIMIT=y<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_MAC=y<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_MARK=y<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_MULTIPORT=y<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_TOS=y<br>
|
|||
|
|
# CONFIG_IP_NF_MATCH_TCPMSS is not set<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_STATE=y<br>
|
|||
|
|
# CONFIG_IP_NF_MATCH_UNCLEAN is not set<br>
|
|||
|
|
# CONFIG_IP_NF_MATCH_OWNER is not set<br>
|
|||
|
|
CONFIG_IP_NF_FILTER=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_REJECT=y<br>
|
|||
|
|
# CONFIG_IP_NF_TARGET_MIRROR is not set<br>
|
|||
|
|
CONFIG_IP_NF_NAT=y<br>
|
|||
|
|
CONFIG_IP_NF_NAT_NEEDED=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_MASQUERADE=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_REDIRECT=y<br>
|
|||
|
|
CONFIG_IP_NF_NAT_FTP=m<br>
|
|||
|
|
CONFIG_IP_NF_MANGLE=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_TOS=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_MARK=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_LOG=y<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_TCPMSS=y<br>
|
|||
|
|
# CONFIG_IPV6 is not set</font><font face="Courier"><br>
|
|||
|
|
</font></p>
|
|||
|
|
</blockquote>
|
|||
|
|
<p>Note that I have built everything I need into the kernel except for the FTP
|
|||
|
|
connection tracking and NAT modules. I have also run successfully with all of
|
|||
|
|
the options selected above built as modules:</p>
|
|||
|
|
|
|||
|
|
<blockquote>
|
|||
|
|
<p><img border="0" src="images/menuconfig1.jpg" width="609" height="842"></p>
|
|||
|
|
|
|||
|
|
<p><font size="2">#<br>
|
|||
|
|
# IP: Netfilter Configuration<br>
|
|||
|
|
#<br>
|
|||
|
|
CONFIG_IP_NF_CONNTRACK=m<br>
|
|||
|
|
CONFIG_IP_NF_FTP=m<br>
|
|||
|
|
# CONFIG_IP_NF_QUEUE is not set<br>
|
|||
|
|
CONFIG_IP_NF_IPTABLES=m<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_LIMIT=m<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_MAC=m<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_MARK=m<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_MULTIPORT=m<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_TOS=m<br>
|
|||
|
|
# CONFIG_IP_NF_MATCH_TCPMSS is not set<br>
|
|||
|
|
CONFIG_IP_NF_MATCH_STATE=m<br>
|
|||
|
|
# CONFIG_IP_NF_MATCH_UNCLEAN is not set<br>
|
|||
|
|
# CONFIG_IP_NF_MATCH_OWNER is not set<br>
|
|||
|
|
CONFIG_IP_NF_FILTER=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_REJECT=m<br>
|
|||
|
|
# CONFIG_IP_NF_TARGET_MIRROR is not set<br>
|
|||
|
|
CONFIG_IP_NF_NAT=m<br>
|
|||
|
|
CONFIG_IP_NF_NAT_NEEDED=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_MASQUERADE=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_REDIRECT=m<br>
|
|||
|
|
CONFIG_IP_NF_NAT_FTP=m<br>
|
|||
|
|
CONFIG_IP_NF_MANGLE=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_TOS=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_MARK=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_LOG=m<br>
|
|||
|
|
CONFIG_IP_NF_TARGET_TCPMSS=m<br>
|
|||
|
|
# CONFIG_IPV6 is not set<br>
|
|||
|
|
</font></p>
|
|||
|
|
|
|||
|
|
</blockquote>
|
|||
|
|
|
|||
|
|
<p><font size="2">Last updated 3/10/2002 - </font><font size="2">
|
|||
|
|
<a href="support.htm">Tom
|
|||
|
|
Eastep</a></font> </p>
|
|||
|
|
<font face="Trebuchet MS"><a href="copyright.htm"><font size="2">Copyright</font>
|
|||
|
|
<EFBFBD> <font size="2">2001, 2002 Thomas M. Eastep.</font></a></font></body></html>
|