Re: [cobalt-users] Ipchains - on CacheRaq?

["Accounts" <noala@xxxxxxxxxxx>]

I've been following all the ipchains threads that I can find, but no one
seems to have put it on a cacheraq (that I've been able to find so far).

Ours is a CacheRaq2, it's kernal is 2.0.34xxx. Is it possible to get
ipchains onto this machine without having to re-compile the kernal (from
what I've read ipchains is for 2.2 kernals). Reason I ask is that I'm a
total Linux newbie and wouldn't have a clue how to compile the kernal
(which I assume would be required for the kernal patch I've seen
mentioned in ipchains discussions/info), nor what is required to patch
the kernal - and whether this is even possible on the CacheRaq without
screwing up all the Cobalt stuff! (don't have a spare to practice on
either)

If anyone has done this and can give me some step by step instructions
(similar to what Carrie posted a while ago regarding installing a bunch
of stuff) I'd really appreciate it.

(Yes I know the CacheRaq has IPFW, but we'd really prefer to use
ipchains).

Thanks in advance.

Noala
Perth, Western Australia

----- Original Message -----
From: "Andy Brown" <andy.brown@xxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Monday, December 17, 2001 4:55 PM
Subject: RE: [cobalt-users] Ipchains


> > Anyone out there installed ipchains on a raq4 and got it working
> >
> > If you have can yo let me know the location and version of
> > the ipchains rpm you used.
> >
> > Regards
> >
>
>
> Hi There,
> Yes I've installed and got ipchains working no problem, although it
was
> a struggle as I forgot that this is an older kernel so make sure when
> you build your rules they are for the right kernel version.
>
> To install:
>
> rpm -Uvh
>
ftp://ftp.rpmfind.net/linux/redhat/6.2/en/os/i386/RedHat/RPMS/ipchains-1
> .3.9-5.i386.rpm
>
> (After ssh'ing in of course!)
>
> And a sample rule:
> /sbin/ipchains -l -I input -d 199.199.199.199 3306 -p tcp -j REJECT
> (Obviously change 199.199.199.199 to your ip and 3306 to the
destination
> port to block)
>
> Simple as that!!
>
> Andy
> andy@xxxxxxxxxxxxxxxxxxxxx
> http://ineedlinux.info/