Re: [Devil-Linux-discuss] 1.8 testing release uploaded

[Rick F. <gr...@gm...>]

Hello Heiko,
Downloaded your latest build (1.8.0-2015-12-04-x86_64) and in process of testing on a lab system.  Here are results of my tests so far.

1) Unable to load nf_conntrack_amanda and nf_nat_amanda:
I don’t use all of the various modules for conntrack but found that nf_conntrack_amanda and nf_nat_amanda has following error when trying to insert those modules:

modprobe: ERROR: could not insert ‘nf_conntrack_amanda’: Unknown symbol in module, or unknown parameter (see dmesg)
modprobe: ERROR: could not insert ‘nf_nat_amanda’: Unknown symbol in module, or unknown parameter (see dmesg)

Unfortunately dmesg does not include any message related to nf_conntrack_amanda.

I don’t need the amanda modules (my firewall script currently loads all *nat* and *conntrack* modules).  If I omit amanda modules, the remaining conntrack and nat modules appear to load fine.


2) Modules iptable_filter and ip6table_filter are no longer loaded automatically.  These modules were loaded automatically in devil-linux 1.6.5 (guessing occurred when I loaded other modules).  In 1.8, the modules weren’t loaded so I modified my machine to load prior to applying netfilter rules.  Not entirely sure of what changed between 1.6.5 and 1.8 to no longer auto load these modules.   Likely just some education needed on my part, but thought I’d point out in case I missed something.

3) Shorewall6
Would it be possible to include shorewall6?  Been thinking of converting my firewall rule management to shorewall but need shorewal6 for IPv6.

Appreciate all your efforts in creating/managing devil-linux as I have found it to be a very convenient option for deploying my firewall.

 - Rick Frey



> On Dec 4, 2015, at 10:59 AM, Heiko Zuerker <he...@zu...> wrote:
> 
> All,
> 
> I'm currently uploading the latest test build.
> It has most reported issues fixed (I believe), with the exception of  
> the syslog-ng config and heartbeat (made progress on this, but need a  
> bit more time).
> 
> As always, your help with testing is very much appreciated.
> 
> 
> -- 
> 
> Regards
>   Heiko Zuerker