Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When I do lsmod I don't see any kernel modules related to iptables despite I have iptables running.

Is it because iptables have been statically linked into the kernel, and I therefore don't need these lines any longer in my firewall scripts?

/sbin/insmod ip_tables
/sbin/insmod ip_conntrack
/sbin/insmod ip_conntrack_ftp
/sbin/insmod iptable_nat
/sbin/insmod ip_nat_ftp
share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

It means that the iptables module is compiled statically into the kernel. Take a look at /path/to/the/kernel/source/.config, you will see something like this:

# grep -i iptables /usr/src/linux/.config
CONFIG_IP_NF_IPTABLES=y

instead of:

CONFIG_IP_NF_IPTABLES=m

for the loadable module.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.