forked from extern/shorewall_code
Convert kernel.htm to Docbook XML
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@982 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep
parent
6cb42aeccb
commit
d7c95d6fa4
@ -1,81 +0,0 @@
|
||||
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||||
<html>
|
||||
<head>
|
||||
<meta http-equiv="Content-Type"
|
||||
content="text/html; charset=windows-1252">
|
||||
<title>Shorewall Kernel Configuration</title>
|
||||
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
|
||||
<meta name="ProgId" content="FrontPage.Editor.Document">
|
||||
</head>
|
||||
<body>
|
||||
<h1 style="text-align: center;">Kernel Configuration<br>
|
||||
</h1>
|
||||
<p>For information regarding configuring and building GNU/Linux
|
||||
kernels, see
|
||||
<a href="http://www.kernelnewbies.org">http://www.kernelnewbies.org</a>.</p>
|
||||
<p>Here's a screen shot of my Network Options Configuration:</p>
|
||||
<blockquote>
|
||||
<p> <img border="0" src="images/netopts.jpg" width="609"
|
||||
height="842"> </p>
|
||||
</blockquote>
|
||||
<p>While not all of the options that I've selected are required, they
|
||||
should be sufficient for most applications. Here's an excerpt from the
|
||||
corresponding .config file (Note: If you are running a kernel older
|
||||
than 2.4.17, be sure to select CONFIG_NETLINK and CONFIG_RTNETLINK):</p>
|
||||
<blockquote> <font size="2">
|
||||
<p>#<br>
|
||||
# Networking options<br>
|
||||
#<br>
|
||||
CONFIG_PACKET=y<br>
|
||||
# CONFIG_PACKET_MMAP is not set<br>
|
||||
# CONFIG_NETLINK_DEV is not set<br>
|
||||
CONFIG_NETFILTER=y<br>
|
||||
# CONFIG_NETFILTER_DEBUG is not set<br>
|
||||
CONFIG_FILTER=y<br>
|
||||
CONFIG_UNIX=y<br>
|
||||
CONFIG_INET=y<br>
|
||||
CONFIG_IP_MULTICAST=y<br>
|
||||
CONFIG_IP_ADVANCED_ROUTER=y<br>
|
||||
CONFIG_IP_MULTIPLE_TABLES=y<br>
|
||||
CONFIG_IP_ROUTE_FWMARK=y<br>
|
||||
CONFIG_IP_ROUTE_NAT=y<br>
|
||||
CONFIG_IP_ROUTE_MULTIPATH=y<br>
|
||||
CONFIG_IP_ROUTE_TOS=y<br>
|
||||
CONFIG_IP_ROUTE_VERBOSE=y<br>
|
||||
# CONFIG_IP_ROUTE_LARGE_TABLES is not set<br>
|
||||
# CONFIG_IP_PNP is not set<br>
|
||||
CONFIG_NET_IPIP=y<br>
|
||||
CONFIG_NET_IPGRE=y<br>
|
||||
# CONFIG_NET_IPGRE_BROADCAST is not set<br>
|
||||
# CONFIG_IP_MROUTE is not set<br>
|
||||
# CONFIG_ARPD is not set<br>
|
||||
CONFIG_INET_ECN=y<br>
|
||||
CONFIG_SYN_COOKIES=y<br>
|
||||
</p>
|
||||
</font> </blockquote>
|
||||
<p>Here's a screen shot of my Netfilter configuration:</p>
|
||||
<blockquote>
|
||||
<p><img src="images/menuconfig1.jpg" alt="(Netfilter Options)"
|
||||
width="589" height="849"> <br>
|
||||
</p>
|
||||
</blockquote>
|
||||
<p>Note that I have built everything I need as modules. You can also
|
||||
build
|
||||
everything into your kernel but if you want to be able to deal with FTP
|
||||
running
|
||||
on a non-standard port then I recommend that you modularize FTP
|
||||
Protocol
|
||||
support.<br>
|
||||
</p>
|
||||
<p>Here's the corresponding part of my .config file:<br>
|
||||
</p>
|
||||
<blockquote>
|
||||
<pre>#<br># IP: Netfilter Configuration<br>#<br>CONFIG_IP_NF_CONNTRACK=m<br>CONFIG_IP_NF_FTP=m<br>CONFIG_IP_NF_AMANDA=m<br>CONFIG_IP_NF_TFTP=m<br># CONFIG_IP_NF_IRC is not set<br># CONFIG_IP_NF_QUEUE is not set<br>CONFIG_IP_NF_IPTABLES=m<br>CONFIG_IP_NF_MATCH_LIMIT=m<br>CONFIG_IP_NF_MATCH_MAC=m<br>CONFIG_IP_NF_MATCH_PKTTYPE=m<br>CONFIG_IP_NF_MATCH_MARK=m<br>CONFIG_IP_NF_MATCH_MULTIPORT=m<br>CONFIG_IP_NF_MATCH_TOS=m<br>CONFIG_IP_NF_MATCH_ECN=m<br>CONFIG_IP_NF_MATCH_DSCP=m<br>CONFIG_IP_NF_MATCH_AH_ESP=m<br>CONFIG_IP_NF_MATCH_LENGTH=m<br># CONFIG_IP_NF_MATCH_TTL is not set<br>CONFIG_IP_NF_MATCH_TCPMSS=m<br>CONFIG_IP_NF_MATCH_HELPER=m<br>CONFIG_IP_NF_MATCH_STATE=m<br>CONFIG_IP_NF_MATCH_CONNTRACK=m<br>CONFIG_IP_NF_MATCH_UNCLEAN=m<br># CONFIG_IP_NF_MATCH_OWNER is not set<br>CONFIG_IP_NF_FILTER=m<br>CONFIG_IP_NF_TARGET_REJECT=m<br># CONFIG_IP_NF_TARGET_MIRROR is not set<br>CONFIG_IP_NF_NAT=m<br>CONFIG_IP_NF_NAT_NEEDED=y<br>CONFIG_IP_NF_TARGET_MASQUERADE=m<br>CONFIG_IP_NF_TARGET_REDIRECT=m<br>CONFIG_IP_NF_NAT_AMANDA=m<br>CONFIG_IP_NF_NAT_LOCAL=y<br># CONFIG_IP_NF_NAT_SNMP_BASIC is not set<br>CONFIG_IP_NF_NAT_FTP=m<br>CONFIG_IP_NF_NAT_TFTP=m<br>CONFIG_IP_NF_MANGLE=m<br>CONFIG_IP_NF_TARGET_TOS=m<br>CONFIG_IP_NF_TARGET_ECN=m<br>CONFIG_IP_NF_TARGET_DSCP=m<br>CONFIG_IP_NF_TARGET_MARK=m<br>CONFIG_IP_NF_TARGET_LOG=m<br>CONFIG_IP_NF_TARGET_ULOG=m<br>CONFIG_IP_NF_TARGET_TCPMSS=m<br>CONFIG_IP_NF_ARPTABLES=m<br>CONFIG_IP_NF_ARPFILTER=m<br># CONFIG_IP_NF_COMPAT_IPCHAINS is not set<br># CONFIG_IP_NF_COMPAT_IPFWADM is not set<br></pre>
|
||||
</blockquote>
|
||||
<p><font size="2">Last updated 7/20/2003 - </font><font size="2"> <a
|
||||
href="support.htm">Tom Eastep</a></font> </p>
|
||||
<a href="copyright.htm"><font size="2">Copyright</font> © <font
|
||||
size="2">2001-2003, Thomas M. Eastep.</font></a><br>
|
||||
<br>
|
||||
</body>
|
||||
</html>
|
||||
152
Shorewall-docs/kernel.xml
Normal file
152
Shorewall-docs/kernel.xml
Normal file
@ -0,0 +1,152 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
|
||||
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
|
||||
<article>
|
||||
<!---->
|
||||
|
||||
<articleinfo>
|
||||
<title>Kernel Configuration</title>
|
||||
|
||||
<authorgroup>
|
||||
<author>
|
||||
<firstname>Tom</firstname>
|
||||
|
||||
<surname>Eastep</surname>
|
||||
</author>
|
||||
</authorgroup>
|
||||
|
||||
<pubdate>2003-07-20</pubdate>
|
||||
|
||||
<copyright>
|
||||
<year>2001-2003</year>
|
||||
|
||||
<holder>Thomas M. Eastep</holder>
|
||||
</copyright>
|
||||
|
||||
<legalnotice>
|
||||
<para>Permission is granted to copy, distribute and/or modify this
|
||||
document under the terms of the GNU Free Documentation License, Version
|
||||
1.2 or any later version published by the Free Software Foundation; with
|
||||
no Invariant Sections, with no Front-Cover, and with no Back-Cover
|
||||
Texts. A copy of the license is included in the section entitled
|
||||
<quote><ulink url="GnuCopyright.htm">GNU Free Documentation License</ulink></quote>.</para>
|
||||
</legalnotice>
|
||||
</articleinfo>
|
||||
|
||||
<note>
|
||||
<para>For information regarding configuring and building GNU/Linux
|
||||
kernels, see <ulink url="http://www.kernelnewbies.org">http://www.kernelnewbies.org</ulink>.</para>
|
||||
</note>
|
||||
|
||||
<section>
|
||||
<title>Network Options Configuration</title>
|
||||
|
||||
<para>Here's a screen shot of my Network Options Configuration:<graphic
|
||||
align="center" fileref="images/netopts.jpg" /></para>
|
||||
|
||||
<para>While not all of the options that I've selected are required,
|
||||
they should be sufficient for most applications. Here's an excerpt
|
||||
from the corresponding .config file (Note: If you are running a kernel
|
||||
older than 2.4.17, be sure to select CONFIG_NETLINK and CONFIG_RTNETLINK):</para>
|
||||
|
||||
<blockquote>
|
||||
<programlisting>#
|
||||
# Networking options
|
||||
#
|
||||
CONFIG_PACKET=y
|
||||
# CONFIG_PACKET_MMAP is not set
|
||||
# CONFIG_NETLINK_DEV is not set
|
||||
CONFIG_NETFILTER=y
|
||||
# CONFIG_NETFILTER_DEBUG is not set
|
||||
CONFIG_FILTER=y
|
||||
CONFIG_UNIX=y
|
||||
CONFIG_INET=y
|
||||
CONFIG_IP_MULTICAST=y
|
||||
CONFIG_IP_ADVANCED_ROUTER=y
|
||||
CONFIG_IP_MULTIPLE_TABLES=y
|
||||
CONFIG_IP_ROUTE_FWMARK=y
|
||||
CONFIG_IP_ROUTE_NAT=y
|
||||
CONFIG_IP_ROUTE_MULTIPATH=y
|
||||
CONFIG_IP_ROUTE_TOS=y
|
||||
CONFIG_IP_ROUTE_VERBOSE=y
|
||||
# CONFIG_IP_ROUTE_LARGE_TABLES is not set
|
||||
# CONFIG_IP_PNP is not set
|
||||
CONFIG_NET_IPIP=y
|
||||
CONFIG_NET_IPGRE=y
|
||||
# CONFIG_NET_IPGRE_BROADCAST is not set
|
||||
# CONFIG_IP_MROUTE is not set
|
||||
# CONFIG_ARPD is not set
|
||||
CONFIG_INET_ECN=y
|
||||
CONFIG_SYN_COOKIES=y</programlisting>
|
||||
</blockquote>
|
||||
</section>
|
||||
|
||||
<section>
|
||||
<title>Netfilter Configuration</title>
|
||||
|
||||
<para>Here's a screen shot of my Netfilter configuration:<graphic
|
||||
align="center" fileref="images/menuconfig1.jpg" /></para>
|
||||
|
||||
<para>Note that I have built everything I need as modules. You can also
|
||||
build everything into your kernel but if you want to be able to deal with
|
||||
FTP running on a non-standard port then I recommend that you modularize
|
||||
FTP Protocol support.</para>
|
||||
|
||||
<para>Here's the corresponding part of my .config file:</para>
|
||||
|
||||
<blockquote>
|
||||
<programlisting>#
|
||||
#   IP: Netfilter Configuration
|
||||
#
|
||||
CONFIG_IP_NF_CONNTRACK=m
|
||||
CONFIG_IP_NF_FTP=m
|
||||
CONFIG_IP_NF_AMANDA=m
|
||||
CONFIG_IP_NF_TFTP=m
|
||||
# CONFIG_IP_NF_IRC is not set
|
||||
# CONFIG_IP_NF_QUEUE is not set
|
||||
CONFIG_IP_NF_IPTABLES=m
|
||||
CONFIG_IP_NF_MATCH_LIMIT=m
|
||||
CONFIG_IP_NF_MATCH_MAC=m
|
||||
CONFIG_IP_NF_MATCH_PKTTYPE=m
|
||||
CONFIG_IP_NF_MATCH_MARK=m
|
||||
CONFIG_IP_NF_MATCH_MULTIPORT=m
|
||||
CONFIG_IP_NF_MATCH_TOS=m
|
||||
CONFIG_IP_NF_MATCH_ECN=m
|
||||
CONFIG_IP_NF_MATCH_DSCP=m
|
||||
CONFIG_IP_NF_MATCH_AH_ESP=m
|
||||
CONFIG_IP_NF_MATCH_LENGTH=m
|
||||
# CONFIG_IP_NF_MATCH_TTL is not set
|
||||
CONFIG_IP_NF_MATCH_TCPMSS=m
|
||||
CONFIG_IP_NF_MATCH_HELPER=m
|
||||
CONFIG_IP_NF_MATCH_STATE=m
|
||||
CONFIG_IP_NF_MATCH_CONNTRACK=m
|
||||
CONFIG_IP_NF_MATCH_UNCLEAN=m
|
||||
# CONFIG_IP_NF_MATCH_OWNER is not set
|
||||
CONFIG_IP_NF_FILTER=m
|
||||
CONFIG_IP_NF_TARGET_REJECT=m
|
||||
# CONFIG_IP_NF_TARGET_MIRROR is not set
|
||||
CONFIG_IP_NF_NAT=m
|
||||
CONFIG_IP_NF_NAT_NEEDED=y
|
||||
CONFIG_IP_NF_TARGET_MASQUERADE=m
|
||||
CONFIG_IP_NF_TARGET_REDIRECT=m
|
||||
CONFIG_IP_NF_NAT_AMANDA=m
|
||||
CONFIG_IP_NF_NAT_LOCAL=y
|
||||
# CONFIG_IP_NF_NAT_SNMP_BASIC is not set
|
||||
CONFIG_IP_NF_NAT_FTP=m
|
||||
CONFIG_IP_NF_NAT_TFTP=m
|
||||
CONFIG_IP_NF_MANGLE=m
|
||||
CONFIG_IP_NF_TARGET_TOS=m
|
||||
CONFIG_IP_NF_TARGET_ECN=m
|
||||
CONFIG_IP_NF_TARGET_DSCP=m
|
||||
CONFIG_IP_NF_TARGET_MARK=m
|
||||
CONFIG_IP_NF_TARGET_LOG=m
|
||||
CONFIG_IP_NF_TARGET_ULOG=m
|
||||
CONFIG_IP_NF_TARGET_TCPMSS=m
|
||||
CONFIG_IP_NF_ARPTABLES=m
|
||||
CONFIG_IP_NF_ARPFILTER=m
|
||||
# CONFIG_IP_NF_COMPAT_IPCHAINS is not set
|
||||
# CONFIG_IP_NF_COMPAT_IPFWADM is not set
|
||||
</programlisting>
|
||||
</blockquote>
|
||||
</section>
|
||||
</article>
|
||||
Loading…
Reference in New Issue
Block a user