2

When I do lsmod I don't see any kernel modules related to iptables despite I have iptables running.

Is it because iptables have been statically linked into the kernel, and I therefore don't need these lines any longer in my firewall scripts?

/sbin/insmod ip_tables
/sbin/insmod ip_conntrack
/sbin/insmod ip_conntrack_ftp
/sbin/insmod iptable_nat
/sbin/insmod ip_nat_ftp

1 Answer 1

3

It means that the iptables module is compiled statically into the kernel. Take a look at /path/to/the/kernel/source/.config, you will see something like this:

# grep -i iptables /usr/src/linux/.config
CONFIG_IP_NF_IPTABLES=y

instead of:

CONFIG_IP_NF_IPTABLES=m

for the loadable module.

1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .