Package: kernel-image-2.6.9-1-686 Severity: normal Followup-For: Bug #282195
I've noticed that if I pre-load ip_tables, ipmasq will start and initialize all rules. If ip_tables is not loaded, the following code in ipmasq kicks in (from /etc/ipmasq/rules/A00sanitycheck): if [ ! -e /proc/net/ip_masquerade -a ! -e /proc/net/ip_tables_names ]; then if ! /sbin/modprobe -q iptable_nat 2>/dev/null; then echo "IP Masquerade has not been enabled in the kernel." exit 1 fi fi Once it tries to load iptable_nat explicitly, ipfwadm will be loaded, which causes the problems. So my workaround to get ipmasq to run correctly under 2.6.9 has been to replace iptable_nat by ip_tables in this snippet, like so: if [ ! -e /proc/net/ip_masquerade -a ! -e /proc/net/ip_tables_names ]; then if ! /sbin/modprobe -q ip_tables 2>/dev/null; then echo "IP Masquerade has not been enabled in the kernel." exit 1 fi fi peace, Jason -- System Information: Debian Release: 3.0 Architecture: i386 Kernel: Linux trotzdem 2.6.9 #1 Tue Dec 14 09:30:17 CST 2004 i686 Locale: LANG=en_US, LC_CTYPE=en_US