mirror of
https://github.com/Zeckmathederg/glfs.git
synced 2025-01-24 06:52:14 +08:00
Update iptables to version 1.3.1 and bootscripts to 20050310
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3538 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Bruce Dubbs
parent
054794ca86
commit
f8962fe558
@ -21,7 +21,7 @@
|
||||
<!ENTITY publisher "Unknown">
|
||||
|
||||
|
||||
<!ENTITY blfs-bootscripts-version "20050302">
|
||||
<!ENTITY blfs-bootscripts-version "20050310">
|
||||
<!ENTITY blfs-bootscripts-download "&downloads-root;/blfs-bootscripts-&blfs-bootscripts-version;.tar.bz2">
|
||||
|
||||
<!-- Part II -->
|
||||
@ -33,7 +33,7 @@
|
||||
<!ENTITY cracklib-version "2.7">
|
||||
<!ENTITY Linux_PAM-version "0.78">
|
||||
<!ENTITY shadow-version "4.0.4.1">
|
||||
<!ENTITY iptables-version "1.2.11">
|
||||
<!ENTITY iptables-version "1.3.1">
|
||||
<!ENTITY gnupg-version "1.4.0">
|
||||
<!ENTITY tripwire-version "portable-0.9">
|
||||
<!ENTITY heimdal-version "0.6.3">
|
||||
|
||||
@ -22,6 +22,9 @@ who wrote what.</para>
|
||||
|
||||
<itemizedlist>
|
||||
|
||||
<listitem><para>March 10th, 2005 [bdubbs]: Update iptables to 1.3.1.
|
||||
</para></listitem>
|
||||
|
||||
<listitem><para>March 10th, 2005 [bdubbs]: Added introductory comments to
|
||||
Chapters 10, 13, and 29.</para></listitem>
|
||||
|
||||
|
||||
@ -6,10 +6,10 @@
|
||||
|
||||
<!ENTITY iptables-download-http "http://www.iptables.org/files/iptables-&iptables-version;.tar.bz2">
|
||||
<!ENTITY iptables-download-ftp "ftp://ftp.netfilter.org/pub/iptables/iptables-&iptables-version;.tar.bz2">
|
||||
<!ENTITY iptables-md5sum "0a5f5f226e41ce408a895bec995e8c05">
|
||||
<!ENTITY iptables-size "157 KB">
|
||||
<!ENTITY iptables-buildsize "4.4 MB">
|
||||
<!ENTITY iptables-time "0.13 SBU">
|
||||
<!ENTITY iptables-md5sum "c3358a3bd0d7755df0b64a5063db296b">
|
||||
<!ENTITY iptables-size "177 KB">
|
||||
<!ENTITY iptables-buildsize "3.8 MB">
|
||||
<!ENTITY iptables-time "0.14 SBU">
|
||||
]>
|
||||
|
||||
<sect1 id="iptables" xreflabel="iptables-&iptables-version;">
|
||||
@ -19,11 +19,12 @@
|
||||
</sect1info>
|
||||
<?dbhtml filename="iptables.html"?>
|
||||
<title>iptables-&iptables-version;</title>
|
||||
|
||||
<indexterm zone="iptables">
|
||||
<primary sortas="a-Iptables">Iptables</primary>
|
||||
<primary sortas="a-Iptables">Iptables</primary>
|
||||
</indexterm>
|
||||
|
||||
<para>The next part of this chapter deals with firewalls. The principle
|
||||
<para>The next part of this chapter deals with firewalls. The principal
|
||||
firewall tool for Linux, as of the 2.4 kernel series, is
|
||||
<application>iptables</application>. It replaces
|
||||
<application>ipchains</application> from the 2.2 series and
|
||||
@ -64,18 +65,16 @@ and those who need to patch it are generally those who need a specific
|
||||
feature; if you don't know why you need to patch the kernel, you're
|
||||
unlikely to need to!</para>
|
||||
|
||||
<sect3><title>Package information</title>
|
||||
<sect3>
|
||||
<title>Package information</title>
|
||||
<itemizedlist spacing='compact'>
|
||||
<listitem><para>Download (HTTP): <ulink
|
||||
url="&iptables-download-http;"/></para></listitem>
|
||||
<listitem><para>Download (FTP): <ulink
|
||||
url="&iptables-download-ftp;"/></para></listitem>
|
||||
<listitem><para>Download MD5 sum: &iptables-md5sum;</para></listitem>
|
||||
<listitem><para>Download size: &iptables-size;</para></listitem>
|
||||
<listitem><para>Estimated disk space required:
|
||||
&iptables-buildsize;</para></listitem>
|
||||
<listitem><para>Estimated build time:
|
||||
&iptables-time;</para></listitem></itemizedlist>
|
||||
<listitem><para>Download (HTTP): <ulink url="&iptables-download-http;"/></para></listitem>
|
||||
<listitem><para>Download (FTP): <ulink url="&iptables-download-ftp;"/></para></listitem>
|
||||
<listitem><para>Download MD5 sum: &iptables-md5sum;</para></listitem>
|
||||
<listitem><para>Download size: &iptables-size;</para></listitem>
|
||||
<listitem><para>Estimated disk space required: &iptables-buildsize;</para></listitem>
|
||||
<listitem><para>Estimated build time: &iptables-time;</para></listitem>
|
||||
</itemizedlist>
|
||||
</sect3>
|
||||
|
||||
</sect2>
|
||||
@ -83,11 +82,18 @@ url="&iptables-download-ftp;"/></para></listitem>
|
||||
<sect2>
|
||||
<title>Installation of <application>iptables</application></title>
|
||||
|
||||
<note><para>Installation of <application>iptables</application> will fail if raw kernel headers are
|
||||
found in <filename class='directory'>/usr/src/linux</filename> either as actual files or a symlink.
|
||||
As of the Linux 2.6 kernel series, this directory should no longer exist because appropriate headers
|
||||
were installed in the linux-libc-headers package during the base <acronym>LFS</acronym> installation.
|
||||
</para></note>
|
||||
<note>
|
||||
<para>Installation of <application>iptables</application> will fail if raw
|
||||
kernel headers are found in <filename
|
||||
class='directory'>/usr/src/linux</filename> either as actual files or a
|
||||
symlink. As of the Linux 2.6 kernel series, this directory should no longer
|
||||
exist because appropriate headers were installed in the linux-libc-headers
|
||||
package during the base <acronym>LFS</acronym> installation. </para>
|
||||
|
||||
<para>For some non-x86 architectures, the raw kernel headers may be required.
|
||||
In that case, add the environment variable KERNEL_DIR=/usr/src/linux to the
|
||||
make commands below.</para>
|
||||
</note>
|
||||
|
||||
<para>Install <application>iptables</application> by running the following
|
||||
commands:</para>
|
||||
@ -135,56 +141,60 @@ time.</para>
|
||||
<?dbfo list-presentation="list"?>
|
||||
|
||||
<varlistentry id="iptables-prog">
|
||||
<term><command>iptables</command></term>
|
||||
<listitem><para>is used to set up, maintain, and inspect the tables of
|
||||
<acronym>IP</acronym> packet filter rules in the Linux kernel.</para>
|
||||
<indexterm zone="iptables iptables-prog">
|
||||
<primary sortas="b-iptables">iptables</primary>
|
||||
</indexterm></listitem>
|
||||
<term><command>iptables</command></term>
|
||||
<listitem><para>is used to set up, maintain, and inspect the tables of
|
||||
<acronym>IP</acronym> packet filter rules in the Linux kernel.</para>
|
||||
<indexterm zone="iptables iptables-prog">
|
||||
<primary sortas="b-iptables">iptables</primary>
|
||||
</indexterm>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry id="iptables-restore">
|
||||
<term><command>iptables-restore</command></term>
|
||||
<listitem><para>is used to restore <acronym>IP</acronym> Tables from data
|
||||
specified on <acronym>STDIN</acronym>. Use I/O redirection provided by your
|
||||
shell to read from a file.</para>
|
||||
<indexterm zone="iptables iptables-restore">
|
||||
<primary sortas="b-iptables-restore">iptables-restore</primary>
|
||||
</indexterm></listitem>
|
||||
<term><command>iptables-restore</command></term>
|
||||
<listitem><para>is used to restore <acronym>IP</acronym> Tables from data
|
||||
specified on <acronym>STDIN</acronym>. Use I/O redirection provided by your
|
||||
shell to read from a file.</para>
|
||||
<indexterm zone="iptables iptables-restore">
|
||||
<primary sortas="b-iptables-restore">iptables-restore</primary>
|
||||
</indexterm>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry id="iptables-save">
|
||||
<term><command>iptables-save</command></term>
|
||||
<listitem><para>is used to dump the contents of an <acronym>IP</acronym> Table
|
||||
in easily parseable format to <acronym>STDOUT</acronym>. Use I/O-redirection
|
||||
provided by your shell to write to a file.</para>
|
||||
<indexterm zone="iptables iptables-save">
|
||||
<primary sortas="b-iptables-save">iptables-save</primary>
|
||||
</indexterm></listitem>
|
||||
<term><command>iptables-save</command></term>
|
||||
<listitem><para>is used to dump the contents of an <acronym>IP</acronym> Table
|
||||
in easily parseable format to <acronym>STDOUT</acronym>. Use I/O-redirection
|
||||
provided by your shell to write to a file.</para>
|
||||
<indexterm zone="iptables iptables-save">
|
||||
<primary sortas="b-iptables-save">iptables-save</primary>
|
||||
</indexterm>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry id="ip6tables">
|
||||
<term><command>ip6tables</command></term>
|
||||
<listitem><para>is used to set up, maintain, and inspect the tables of
|
||||
<acronym>IP</acronym>v6 packet filter rules in the Linux kernel. Several
|
||||
different tables may be defined. Each table contains a number of built-in
|
||||
chains and may also contain user-defined chains.</para>
|
||||
<indexterm zone="iptables ip6tables">
|
||||
<primary sortas="b-ip6tables">ip6tables</primary>
|
||||
</indexterm></listitem>
|
||||
<term><command>ip6tables</command></term>
|
||||
<listitem><para>is used to set up, maintain, and inspect the tables of
|
||||
<acronym>IP</acronym>v6 packet filter rules in the Linux kernel. Several
|
||||
different tables may be defined. Each table contains a number of built-in
|
||||
chains and may also contain user-defined chains.</para>
|
||||
<indexterm zone="iptables ip6tables">
|
||||
<primary sortas="b-ip6tables">ip6tables</primary>
|
||||
</indexterm>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry id="libip-iptables">
|
||||
<term><filename class='libraryfile'>libip*.so</filename></term>
|
||||
<listitem><para>library modules are various modules (implemented as dynamic
|
||||
libraries) which extend the core functionality of
|
||||
<command>iptables</command>.</para>
|
||||
<indexterm zone="iptables libip-iptables">
|
||||
<primary sortas="c-libip-iptables">libip*.so</primary>
|
||||
</indexterm></listitem>
|
||||
<term><filename class='libraryfile'>libip*.so</filename></term>
|
||||
<listitem><para>library modules are various modules (implemented as dynamic
|
||||
libraries) which extend the core functionality of
|
||||
<command>iptables</command>.</para>
|
||||
<indexterm zone="iptables libip-iptables">
|
||||
<primary sortas="c-libip-iptables">libip*.so</primary>
|
||||
</indexterm>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
</variablelist>
|
||||
|
||||
</sect2>
|
||||
|
||||
</sect1>
|
||||
|
||||
Loading…
Reference in New Issue
Block a user