Linux伊甸园论坛 » Linux/Unix系统安全 » 关于iptables

fy866 发表于 2003-12-22 11:57

关于iptables

我的系统原来没有防火墙，所以就在网上下载一个，可是却安装不了，知道的请帮我一下，谢谢
如下

[fy@localhost iptables-1.2.9]$ ls
COPYING ip6tables-save.8 iptables-save.8
extensions ip6tables-save.c iptables-save.c
include ip6tables-standalone.c iptables-standalone.c
INCOMPATIBILITIES ippool iptables-standalone.d
INSTALL iptables.8 libipq
ip6tables.8 iptables.c libiptc
ip6tables.c iptables.d libiptc2
ip6tables-restore.8 iptables-restore.8 Makefile
ip6tables-restore.c iptables-restore.c Rules.make
[fy@localhost iptables-1.2.9]$ su
Password:
[root@localhost iptables-1.2.9]# make
Extensions found:
cc -O2 -Wall -Wunused -I/usr/src/linux/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.9\" -fPIC -o extensions/libipt_conntrack_sh.o -c extensions/libipt_conntrack.c
In file included from extensions/libipt_conntrack.c:14:
include/linux/netfilter_ipv4/ipt_conntrack.h:28: `IP_CT_DIR_MAX' undeclared here (not in a function)
include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function)
include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function)
extensions/libipt_conntrack.c: In function `parse_status':
extensions/libipt_conntrack.c:109: `IPS_EXPECTED' undeclared (first use in this function)
extensions/libipt_conntrack.c:109: (Each undeclared identifier is reported only once
extensions/libipt_conntrack.c:109: for each function it appears in.)
extensions/libipt_conntrack.c:111: `IPS_SEEN_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c:113: `IPS_ASSURED' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `parse':
extensions/libipt_conntrack.c:212: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function)
extensions/libipt_conntrack.c:269: `IP_CT_DIR_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `print_status':
extensions/libipt_conntrack.c:378: `IPS_EXPECTED' undeclared (first use in this function)
extensions/libipt_conntrack.c:382: `IPS_SEEN_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c:386: `IPS_ASSURED' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `matchinfo_print':
extensions/libipt_conntrack.c:440: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function)
extensions/libipt_conntrack.c:460: `IP_CT_DIR_REPLY' undeclared (first use in this function)
make: *** [extensions/libipt_conntrack_sh.o] Error 1

yfydz 发表于 2003-12-24 09:07

更新内核

fy866 发表于 2003-12-24 22:44

不好意思，我是刚来的更新内核对于我真是太难了，有没有象RPM一样的更新方法呀。或者干脆换个防火墙，最好是通用版的

lost33 发表于 2003-12-25 11:56

*.c不是用make安装的把

下载iptables 的rpm 多方便撒

fy866 发表于 2003-12-25 12:26

谢谢，我下载了很多版本的RPM包，可是安装的时候总提示需要什么文件支持，我该怎么办呀

fy866 发表于 2003-12-25 15:29

我找了个比较老的版本安装提示成功，可是却什么也没有，如下
[root@localhost /root]# rpm -ihv iptables-1.2.6a-2.src.rpm
   1:iptables               ########################################### [100%]
[root@localhost /root]# iptables
bash: iptables: command not found
[root@localhost /root]# man iptables
No manual entry for iptables
麻烦高手回答一下，谢谢

terminator 发表于 2003-12-26 01:43

notice it's xxx.src.rpm? you installed the source package, not the binary package

fy866 发表于 2003-12-26 08:34

谢谢你，我再找找试试

fy866 发表于 2003-12-26 10:24

安装成功了，谢谢你们的回答，不过是不是默认的情况下拒绝一切连接呀，现在上不了网，连（127.0.0.1）都PING不通

fy866 发表于 2003-12-26 23:14

以前用LINUX可以上网的，可是现在安了IPTABLES后上不去了，我该如何设置防火墙规则呀，听说设置完，重起就会恢复原来的设置，该怎么做呀，麻烦回答一下，先谢了

查看完整版本: 关于iptables