LinuxSA Mailing list archives

  From: Alan Kennington <akenning@topology.org>
  To  : LinuxSA <linuxsa@linuxsa.org.au>
  Date: Mon, 25 Jun 2001 14:23:11 +0930

Re: Port scan and iptables

On Mon, Jun 25, 2001 at 09:05:14AM +1000, Antony Clarke wrote:
> 
> Also I want to replace my ipchains with iptables however from research I
> believe that ipchains needs to be removed for iptables to work. If i run
> setup as root and then firewall and select no firewall it removes ipchains
> from /etc/sysconfig. Is this enough or would I need to remove all ipchains
> files from the file system and Kernel?
> 

Antony,

As I understand it, the main thing is to make sure that
the ipchains module is not loaded into the kernel.
And that ipchains module could get into your OS
by either being put there at boot time or being loaded
automatically when you run an ipchains script.

Just after booting, do you see an ipchains module
when you type "lsmod"? If so, you will have to 
find out which /etc/rc.d script is loading it
and deactivate it.

If the ipchains.o module is not loaded just after booting,
then you can just use iptables with impunity.

Cheers,
Alan Kennington.

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject