[gentoo-user] Re: ip_conntrack - is it missing

[reader@newsguy.com]

Johann Schmitz <johann@j-schmitz.net> writes:

> reader@newsguy.com schrieb:
>> Turns up nothing even close.  Does it mean I'm still missing something
>> in the kernel build? or is it just baloney or out of date?
>
> Hi,
> you can simply check our kernel config by typing:
>
>   cat /usr/src/linux/.config | grep -i conntrack 
>
> IIRC, there should be the lines

Yes but what about the comment in the HOWTO:

"cat/proc/net/ip_conntrack". 
   Even with no firewall configured, Linux's conntrack functionality
   is working behind the scenes, keeping track of the connections that
   your machine is participating in.

I see:
 grep -i ^[^#].*conntrack /usr/src/linux/.config

  CONFIG_NF_CONNTRACK_ENABLED=m
  CONFIG_NF_CONNTRACK=m
  CONFIG_NF_CONNTRACK_MARK=y
  CONFIG_NF_CONNTRACK_SECMARK=y
  CONFIG_NF_CONNTRACK_EVENTS=y
  CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
  CONFIG_NF_CONNTRACK_IPV4=m
  CONFIG_NF_CONNTRACK_PROC_COMPAT=y


But do NOT see what that HOWTO refers to (/proc/net/ip_conntrack)

[...]

> Hope you can guess what it want to say - english isn't my native
> lang, and it is early in the morning ;)

English is my native language and you are considerably better at it
than I am.  That may not be much of a compliment though because I'm an
illiterate hill-billy.

-- 
gentoo-user@lists.gentoo.org mailing list