Sunday, May 22, 2011

Continue with How to Install IPTables on Linux

Continue with How to Install IPTables on Linux and still with Inside the Computers, we will continue this post until the rest of this post will end.


We need to install those modules if we use the facility. For example, we don’t need PCMCIA if we use a server to create this IPTables. You can see more information in the directory /usr/src/linux/Documentation/Changes in every your Linux machine.
After all the modules installed properly, do not forget to do the back up to our kernel before we do the modification on it. This step or level is very important because if we has a problem to a modified kernel, we won’t be loose the past kernel because we already back up it. The configuration on LILO or GRUB also we back up to, just in case if there is booting problem to a new kernel.
After all those step is done, we are ready to do the kernel compiling to activate the IPTables facility on the Net filter module. Make sure that we already in the directory /usr/src/linux, or wherever you put the kernel source. We also login as root to the computer that we want do the modification to the kernel. Follow all the instruction on README file on the directory our source kernel until you has the “Make” command.
You can also use the command “make config” or make menuconfig or make xconfig to entering the main menu from kernel arrangement. The safest way to use is make menuconfig or make xconfig, because it can make us to do the kernel modification faster. Because every PC or server is different, so what we need to see in the kernel modification is that we have to activated the network cards, SCSI peripherals, and other peripherals which connected to the network.
After entering inside the arrange menu, activated Net filter facilities and IPTables support by select Networking Options menu, then give * mark on the Network Packet Filtering Menu (Replaces Ipchains). There will be more options appear, then select IP option: Netfilter Configuration. After we go to the inside it, select the IP tables support option (required for filtering/masq/NAT).
Activated this facility by give this symbol ( * ) mark in this option. For other facility, if we are not sure we can make it function as modules only, not installed in to the active kernel. But when some time we want to use it, we don’t have to re-compile this kernel.
Now the arrangement is enough to activated the IPTables facilities. Save the kernel configuration and exit to the prompt page. Then use the make bzImage, make modules, make module install command. Once again, make sure the old kernel configuration is save and list on the scrip boot loader. Then we can reboot the computer and we get the new kernel.
The next step is installing IPTables program which you can download it on the internet. And the installation of this program is very easy and simple, then after we complete all those step, we can use IPTables facilities now.

No comments:

Post a Comment