Stealth and iptables error

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Stealth and iptables error

Postby pawelbial » Thu Jul 03, 2008 7:50 am

Hi

I have problem with using stealth in Debian Etch with patched Kernel 2.6.24 (form Lenny source).
I'm not sure for what version of IPtables is prepare patch in grescurity main site.

First I patched Lenny iptables (1.4.0 version). But when I type
Code: Select all
iptables -A INPUT -p tcp -m stealth -j REJECT
or
Code: Select all
iptables -A INPUT -p tcp -m stealth -j DROP

there was Segmentation fault

After that I compiled patched iptables from Etch (1.3.6 version). This time I have
Code: Select all
iptables: No chain/target/match by that name


What I can do now?
pawelbial
 
Posts: 1
Joined: Thu Jul 03, 2008 7:32 am

Re: Stealth and iptables error

Postby cormander » Sun Jul 06, 2008 1:53 am

Check your kernel configuration, is "CONFIG_IP_NF_MATCH_STEALTH" set? And if so, is it "y" or "m"?
cormander
 
Posts: 154
Joined: Tue Jan 29, 2008 12:51 pm


Return to grsecurity support