grsecurity forums

Hello, with default kernel on Debian 3.2.0-4-686-pae iptables LOG work, but with grsec kernel 3.7.7-grsec (with made old config) don't work ("iptables: No chain/target/match by that name.")

Code: Select all

+ iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j LOG --log-prefix 'Ping: '
iptables: No chain/target/match by that name.

Code: Select all

# diff <(egrep -i "netfilter|iptables" /boot/config-3.2.0-4-686-pae | grep -v ^#) <(egrep -i "netfilter|iptables" /boot/config-3.7.7-grsec | grep -v ^#)
43a44
> CONFIG_NETFILTER_XT_MATCH_ECN=m

any idea how fix it?

noone know?:(

Check CONFIG_NETFILTER_XT_TARGET_LOG

Code: Select all

# grep CONFIG_NETFILTER_XT_TARGET_LOG .config
# CONFIG_NETFILTER_XT_TARGET_LOG is not set

where can I set this in menu (due to dependencies)?

Ok, I changed it just in .config, now iptables with LOG work! thanks!