From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Mon, 22 Oct 2007 21:12:41 +0400 From: "Konstantin A. Lepikhov" To: ALT Linux Team development discussions Message-ID: <20071022171241.GB32326@lks.home> Mail-Followup-To: ALT Linux Team development discussions References: <200710221239.03236.peet@altlinux.ru> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wac7ysb48OaltWcw" Content-Disposition: inline In-Reply-To: <200710221239.03236.peet@altlinux.ru> X-Operation-System: ALT Linux Sisyphus (20070101) 2.6.22-wks-smp-alt0.2 User-Agent: Mutt/1.5.14 (2007-02-12) Subject: Re: [devel] devel-kernel; new kernels and l7-filter X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2007 17:36:27 -0000 Archived-At: List-Archive: List-Post: --wac7ysb48OaltWcw Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi Peter! Monday 22, at 12:39:03 PM you wrote: > ... >=20 > =F3=CB=C1=D6=C9=D4=C5, =C1 =CF=D4 devel-kernel =CD=C5=CE=D1 =CF=D4=D0=C9= =D3=C1=CC=C9 =DA=C1 =C4=C5=CC=CF =C9=CC=C9 =D0=D2=CF=D3=D4=CF =D4=C1=CB =D3= =D2=C5=DA =D0=D2=CF=DB=A3=CC? >=20 > ... >=20 > =F0=CF=CB=C1 =DE=D4=CF =CE=C1=D0=C9=DB=D5 =D3=C0=C4=C1. >=20 > =F0=CF=D3=CB=CF=CC=D8=CB=D5 =D1=C4=D2=CF >2.6.19.7 =C7=D2=D1=C4=A3=D4 =CE= =C5=CD=C9=CE=D5=C5=CD=CF, =D4=CF =D5 =CD=C5=CE=D1 =C5=D3=D4=D8 =CE=C1 =DC= =D4=D5 =D4=C5=CD=D5=20 > =D0=D2=C5=D7=C5=CE=D4=C9=D7=CE=D9=CA =D7=D9=D3=D4=D2=C5=CC =D7 =C7=CF=CC= =CF=D7=D5 =CD=DC=CA=CE=D4=C5=CA=CE=C5=D2=C1=CD =D1=C4=C5=D2. >=20 > =F1 =C2=D9=CC =C2=D9 =CF=DE=C5=CE=D8 =D2=C1=C4, =C5=D3=CC=C9 =C2=D9 =D7= =D9 =D0=D2=C9 =D3=C2=CF=D2=CB=C5 =CE=CF=D7=D9=C8 =D1=C4=C5=D2 =C4=C5=CC=C1= =CC=C9 =D4=C1=CB=CF=C5 =CE=C5=CB=CF=DB=C5=D2=CE=CF=C5=20 > =C4=C5=CA=D3=D4=D7=C9=C5: >=20 > In the Linux kernel config, go to Networking ??? Networking options ??? N= etwork=20 > packet filtering framework (Netfilter) ??? Core Netfilter Configuration.= =20 > Under "Netfilter connection tracking support", select "Layer 3 Dependent= =20 > Connection tracking (OBSOLETE)". Then go to Networking ??? Networking opt= ions ???=20 > Network packet filtering framework ??? IP: Netfilter Configuration" and= =20 > enable "Connection tracking netlink interface" (and probably most of the = rest=20 > of the stuff on that page). >=20 > (=C9=DA =C4=CF=CB=D5=CD=C5=CE=D4=C1=C3=C9=C9 =CE=C1 L7-filter) =D1 =C4=CF=CC=C7=CF =C4=D5=CD=C1=CC, =D7=CB=CC=C0=DE=C1=D4=D8 =DC=D4=D5 =CF= =D0=C3=C9=C0 =D7 =CE=CF=D7=CF=CD =D1=C4=D2=C5 =C9=CC=C9 =CE=C5=D4 ;) >=20 > ... >=20 > =EF=C2=CF=D3=CE=CF=D7=C1=CE=C9=C5: L7-filter -- =C4=CF=D7=CF=CC=D8=CE=CF = =CD=CF=DD=CE=D9=CA =C9=CE=D3=D4=D2=D5=CD=C5=CE=D4 =C4=CC=D1 =D7=D9=D3=CF=CB= =CF=D5=D2=CF=D7=CE=C5=D7=CF=CA=20 > =C6=C9=CC=D8=D4=D2=C1=C3=C9=C9 =D4=D2=C1=C6=C6=C9=CB=C1, =C9 =CF=CE =D3= =D5=DD=C5=D3=D4=D7=D5=C5=D4 =D7 =C4=D7=D5=C8 =D7=C1=D2=C9=C1=CE=D4=C1=C8, = =D1=C4=C5=D2=CE=CF=CD =C9 userspace. =D7=C9=C4=C5=CC =CD=CF=C5 kernel-image-nwk-smp =D7 git'e? >=20 > =EC=C9=DE=CE=CF =CD=CE=C5 =C2=CF=CC=D8=DB=C5 =CE=D2=C1=D7=C9=D4=D3=D1 =D7= =D4=CF=D2=CF=CA, =CB=CF=D4=CF=D2=D9=CA, =CE=C5=D3=CD=CF=D4=D2=D1 =CE=C1 =D0= =CF=D4=C5=D2=C0=20 > =D3=CB=CF=D2=CF=D3=D4=D2=C5=CC=D8=CE=CF=D3=D4=C9, =C7=CF=D2=C1=DA=C4=CF = =C2=C5=DA=CF=D0=C1=D3=CE=C5=C5, =D4.=CB., =D2=C1=C2=CF=D4=C1=D1 =D7=CE=C5 = =D1=C4=D2=C1, =C9=CD=C5=C5=D4 =CD=C9=CE=C9=CD=D5=CD=20 > =DB=C1=CE=D3=CF=D7 =CE=C1=CB=C5=D2=CE=C9=D4=D8 =CD=C1=DB=C9=CE=D5 =D0=D2= =C9 =D3=CC=D5=DE=C1=C5. >=20 > =EF=C4=CE=C1=CB=CF =D2=C1=C2=CF=D4=C1 userspace-=D7=C1=D2=C9=C1=CE=D4=C1 = =C9=C4=A3=D4 =DE=C5=D2=C5=DA netlink connection tracking, =C1 =D4=C1=CD=20 > =DE=D4=CF-=D4=CF =C5=DD=A3 =CE=C5 =D3=D2=CF=D3=CC=CF=D3=D8 =D7 =C2=C9=C2= =CC=C9=CF=D4=C5=CB=C1=C8, =C9 =CF=D0=C3=C9=D1 =D1=C4=D2=C1 "Layer 3 Indepen= dent=20 > Connection tracking" (=D7=D9=D3=D4=C1=D7=CC=C5=CE=CE=C1=D1 =D0=CF =D5=CD= =CF=CC=DE=C1=CE=C9=C0), =CB=CF=CE=C5=DE=CE=CF, =C8=CF=D2=CF=DB=C1, =CE=CF = =D0=CF=CB=C1=20 > =DE=D4=CF =C1) =CE=C5 =D0=D2=C9=CE=CF=D3=C9=D4 =CD=C5=C7=C1=D0=CF=CC=D8= =DA=D9 =C2) =C4=C5=CC=C1=C5=D4 =D2=C1=C2=CF=D4=D5 userspace-=D7=C1=D2=C9=C1= =CE=D4=C1 L7-filter=20 > =CE=C5=D7=CF=DA=CD=CF=D6=CE=CF=CA. >=20 > ... >=20 > =F0=CF=DC=D4=CF=CD=D5, =C5=D3=CC=C9 =CE=C5=D4 =C9=CE=CF=C7=CF =D3=CF=C6= =D4=C1 (=CE=C1=D3=CB=CF=CC=D8=CB=CF =D1 =D0=CF=CD=CE=C0, =D4=C1=CB=CF=CA = =D3=CF=C6=D4 =C5=DD=A3 =CE=C5 =D0=CF=D1=D7=C9=CC=D3=D1),=20 > =D4=D2=C5=C2=D5=C0=DD=C5=C7=CF =C4=C5=C6=CF=CC=D4=CE=CF=C5 =D0=CF=D7=C5= =C4=C5=CE=C9=C5 =CE=CF=D7=D9=C8 =D1=C4=C5=D2, =D4=CF =D1 =C2=D9 =D0=D2=CF= =D3=C9=CC =D7=D2=C5=CD=C5=CE=CE=CF =D3=CF=C2=C9=D2=C1=D4=D8=20 > =D3 "Layer 3 Dependent Connection tracking (OBSOLETE)" -- =D0=CF=CB=C1 = =C2=C9=C2=CC=C9=CF=D4=C5=CB=C9 =CE=C5=20 > =D5=D4=D2=D1=D3=D5=D4=D3=D1. >=20 --=20 WBR et al. --wac7ysb48OaltWcw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHHNoJVtlNyKwhNDsRAkcOAKCNEh1hBqgnT+6GsBUM4aCpM64regCeOid3 e/i+PQzT+yKozkXcAVjJRu4= =etyi -----END PGP SIGNATURE----- --wac7ysb48OaltWcw--