NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
fflash
Jul 16, 2013Aspirant
ReadyNasOs 6.0.x Kernel, module compilation for iptables
Hello, I have a Ultra2 Nas under ReadyNas OS 6.0.8. I would like to compile some specific kernel modules required by iptable as they are not available in the OS. However all the tutorials I found a...
fflash
Jul 18, 2013Aspirant
Hello, so after some trying I was unable to make iptables modules working. What I did:
Download ReadyNasOS 6.0.8 at http://www.downloads.netgear.com/files/GPL/ReadyNASOS_V6.0.8_WW_src.zip
Unzip in /home/admin/readynasos
Symlink /usr/src/linux to /home/admin/readynasos (I don't really know what is for ?)
Then move to the /usr/src/linux/linux-3.0.79/ (I just see that maybe the symlink /usr/src/linux should point on the linux-3.0.79 folder and not readynasos... ?)
Recompile the clean downloaded kernel (read somewhere that it could be require):
Select the modules:
I choose the iptable and pppt modules and compiled modules
Also with depmod -a, I read that make modules_install could fail sometime.
If I do lsmod, I get only:
But with modprobe -l:
But if I try:
I get:
And dmesg:
I read in http://www.readynas.com/forum/viewtopic.php?f=35&t=63015#p358242 that iptables modules require probably to recompile the kernel and not only modules and install the kernel in the system because some modules need some modification in the kernel itself. But the guy seem to be in trouble once the kernel replaced...
So is there any way to make iptables working on readynas OS 6.0.x ?
Thank you for you help.
Download ReadyNasOS 6.0.8 at http://www.downloads.netgear.com/files/GPL/ReadyNASOS_V6.0.8_WW_src.zip
Unzip in /home/admin/readynasos
Symlink /usr/src/linux to /home/admin/readynasos (I don't really know what is for ?)
Then move to the /usr/src/linux/linux-3.0.79/ (I just see that maybe the symlink /usr/src/linux should point on the linux-3.0.79 folder and not readynasos... ?)
Recompile the clean downloaded kernel (read somewhere that it could be require):
#> make oldconfig
#> make all
Select the modules:
#> make menuconfig
I choose the iptable and pppt modules and compiled modules
#> make modules
#> make modules_install
Also with depmod -a, I read that make modules_install could fail sometime.
#> depmod -a
If I do lsmod, I get only:
Module Size Used by Tainted: P
pvgpio 11624 0
vpd 10344 0
But with modprobe -l:
kernel/net/xfrm/xfrm_ipcomp.ko
kernel/net/netfilter/xt_u32.ko
kernel/net/netfilter/xt_time.ko
kernel/net/netfilter/xt_tcpmss.ko
kernel/net/netfilter/xt_string.ko
kernel/net/netfilter/xt_statistic.ko
kernel/net/netfilter/xt_state.ko
kernel/net/netfilter/xt_sctp.ko
kernel/net/netfilter/xt_recent.ko
kernel/net/netfilter/xt_realm.ko
kernel/net/netfilter/xt_rateest.ko
kernel/net/netfilter/xt_quota.ko
kernel/net/netfilter/xt_policy.ko
kernel/net/netfilter/xt_pkttype.ko
kernel/net/netfilter/xt_physdev.ko
kernel/net/netfilter/xt_owner.ko
kernel/net/netfilter/xt_osf.ko
kernel/net/netfilter/xt_multiport.ko
kernel/net/netfilter/xt_mark.ko
kernel/net/netfilter/xt_mac.ko
kernel/net/netfilter/xt_limit.ko
kernel/net/netfilter/xt_length.ko
kernel/net/netfilter/xt_iprange.ko
kernel/net/netfilter/xt_hl.ko
kernel/net/netfilter/xt_helper.ko
kernel/net/netfilter/xt_hashlimit.ko
kernel/net/netfilter/xt_esp.ko
kernel/net/netfilter/xt_dscp.ko
kernel/net/netfilter/xt_devgroup.ko
kernel/net/netfilter/xt_dccp.ko
kernel/net/netfilter/xt_cpu.ko
kernel/net/netfilter/xt_conntrack.ko
kernel/net/netfilter/xt_connmark.ko
kernel/net/netfilter/xt_connlimit.ko
kernel/net/netfilter/xt_connbytes.ko
kernel/net/netfilter/xt_comment.ko
kernel/net/netfilter/xt_cluster.ko
kernel/net/netfilter/xt_addrtype.ko
kernel/net/netfilter/xt_TEE.ko
kernel/net/netfilter/xt_TCPMSS.ko
kernel/net/netfilter/xt_RATEEST.ko
kernel/net/netfilter/xt_NFQUEUE.ko
kernel/net/netfilter/xt_NFLOG.ko
kernel/net/netfilter/xt_IDLETIMER.ko
kernel/net/netfilter/xt_HL.ko
kernel/net/netfilter/xt_CLASSIFY.ko
kernel/net/netfilter/nfnetlink_queue.ko
kernel/net/netfilter/nfnetlink_log.ko
kernel/net/netfilter/nfnetlink.ko
kernel/net/netfilter/nf_conntrack_tftp.ko
kernel/net/netfilter/nf_conntrack_snmp.ko
kernel/net/netfilter/nf_conntrack_sip.ko
kernel/net/netfilter/nf_conntrack_sane.ko
kernel/net/netfilter/nf_conntrack_proto_udplite.ko
kernel/net/netfilter/nf_conntrack_proto_sctp.ko
kernel/net/netfilter/nf_conntrack_proto_gre.ko
kernel/net/netfilter/nf_conntrack_proto_dccp.ko
kernel/net/netfilter/nf_conntrack_pptp.ko
kernel/net/netfilter/nf_conntrack_netlink.ko
kernel/net/netfilter/nf_conntrack_netbios_ns.ko
kernel/net/netfilter/nf_conntrack_irc.ko
kernel/net/netfilter/nf_conntrack_h323.ko
kernel/net/netfilter/nf_conntrack_ftp.ko
kernel/net/netfilter/nf_conntrack_broadcast.ko
kernel/net/netfilter/nf_conntrack_amanda.ko
kernel/net/netfilter/nf_conntrack.ko
kernel/net/netfilter/ipset/ip_set_list_set.ko
kernel/net/netfilter/ipset/ip_set_hash_netport.ko
kernel/net/netfilter/ipset/ip_set_hash_net.ko
kernel/net/netfilter/ipset/ip_set_hash_ipportnet.ko
kernel/net/netfilter/ipset/ip_set_hash_ipportip.ko
kernel/net/netfilter/ipset/ip_set_hash_ipport.ko
kernel/net/netfilter/ipset/ip_set_hash_ip.ko
kernel/net/netfilter/ipset/ip_set_bitmap_port.ko
kernel/net/netfilter/ipset/ip_set_bitmap_ipmac.ko
kernel/net/netfilter/ipset/ip_set_bitmap_ip.ko
kernel/net/netfilter/ipset/ip_set.ko
kernel/net/llc/llc.ko
kernel/net/ipv6/netfilter/nf_defrag_ipv6.ko
kernel/net/ipv6/netfilter/nf_conntrack_ipv6.ko
kernel/net/ipv6/netfilter/ip6table_security.ko
kernel/net/ipv6/netfilter/ip6table_raw.ko
kernel/net/ipv6/netfilter/ip6table_mangle.ko
kernel/net/ipv6/netfilter/ip6table_filter.ko
kernel/net/ipv6/netfilter/ip6t_rt.ko
kernel/net/ipv6/netfilter/ip6t_mh.ko
kernel/net/ipv6/netfilter/ip6t_ipv6header.ko
kernel/net/ipv6/netfilter/ip6t_hbh.ko
kernel/net/ipv6/netfilter/ip6t_frag.ko
kernel/net/ipv6/netfilter/ip6t_eui64.ko
kernel/net/ipv6/netfilter/ip6t_ah.ko
kernel/net/ipv6/netfilter/ip6t_REJECT.ko
kernel/net/ipv6/netfilter/ip6t_LOG.ko
kernel/net/ipv6/netfilter/ip6_tables.ko
kernel/net/ipv4/xfrm4_tunnel.ko
kernel/net/ipv4/xfrm4_mode_tunnel.ko
kernel/net/ipv4/xfrm4_mode_transport.ko
kernel/net/ipv4/xfrm4_mode_beet.ko
kernel/net/ipv4/tunnel4.ko
kernel/net/ipv4/netfilter/nf_nat_tftp.ko
kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko
kernel/net/ipv4/netfilter/nf_nat_sip.ko
kernel/net/ipv4/netfilter/nf_nat_proto_udplite.ko
kernel/net/ipv4/netfilter/nf_nat_proto_sctp.ko
kernel/net/ipv4/netfilter/nf_nat_proto_gre.ko
kernel/net/ipv4/netfilter/nf_nat_proto_dccp.ko
kernel/net/ipv4/netfilter/nf_nat_pptp.ko
kernel/net/ipv4/netfilter/nf_nat_irc.ko
kernel/net/ipv4/netfilter/nf_nat_h323.ko
kernel/net/ipv4/netfilter/nf_nat_ftp.ko
kernel/net/ipv4/netfilter/nf_nat_amanda.ko
kernel/net/ipv4/netfilter/nf_nat.ko
kernel/net/ipv4/netfilter/nf_defrag_ipv4.ko
kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko
kernel/net/ipv4/netfilter/iptable_security.ko
kernel/net/ipv4/netfilter/iptable_raw.ko
kernel/net/ipv4/netfilter/iptable_nat.ko
kernel/net/ipv4/netfilter/iptable_mangle.ko
kernel/net/ipv4/netfilter/iptable_filter.ko
kernel/net/ipv4/netfilter/ipt_ecn.ko
kernel/net/ipv4/netfilter/ipt_ah.ko
kernel/net/ipv4/netfilter/ipt_ULOG.ko
kernel/net/ipv4/netfilter/ipt_REJECT.ko
kernel/net/ipv4/netfilter/ipt_REDIRECT.ko
kernel/net/ipv4/netfilter/ipt_NETMAP.ko
kernel/net/ipv4/netfilter/ipt_MASQUERADE.ko
kernel/net/ipv4/netfilter/ipt_LOG.ko
kernel/net/ipv4/netfilter/ipt_ECN.ko
kernel/net/ipv4/netfilter/ipt_CLUSTERIP.ko
kernel/net/ipv4/netfilter/ip_tables.ko
kernel/net/ipv4/netfilter/ip_queue.ko
kernel/net/ipv4/netfilter/arptable_filter.ko
kernel/net/ipv4/netfilter/arpt_mangle.ko
kernel/net/ipv4/netfilter/arp_tables.ko
kernel/net/ipv4/ipip.ko
kernel/net/ipv4/ipcomp.ko
kernel/net/bridge/netfilter/ebtables.ko
kernel/net/bridge/netfilter/ebtable_nat.ko
kernel/net/bridge/netfilter/ebtable_filter.ko
kernel/net/bridge/netfilter/ebtable_broute.ko
kernel/net/bridge/netfilter/ebt_vlan.ko
kernel/net/bridge/netfilter/ebt_stp.ko
kernel/net/bridge/netfilter/ebt_snat.ko
kernel/net/bridge/netfilter/ebt_redirect.ko
kernel/net/bridge/netfilter/ebt_pkttype.ko
kernel/net/bridge/netfilter/ebt_nflog.ko
kernel/net/bridge/netfilter/ebt_mark_m.ko
kernel/net/bridge/netfilter/ebt_mark.ko
kernel/net/bridge/netfilter/ebt_log.ko
kernel/net/bridge/netfilter/ebt_limit.ko
kernel/net/bridge/netfilter/ebt_ip6.ko
kernel/net/bridge/netfilter/ebt_ip.ko
kernel/net/bridge/netfilter/ebt_dnat.ko
kernel/net/bridge/netfilter/ebt_arpreply.ko
kernel/net/bridge/netfilter/ebt_arp.ko
kernel/net/bridge/netfilter/ebt_among.ko
kernel/net/bridge/netfilter/ebt_802_3.ko
kernel/net/bridge/bridge.ko
kernel/net/802/stp.ko
kernel/net/802/psnap.ko
kernel/net/802/p8022.ko
kernel/lib/ts_kmp.ko
kernel/lib/ts_fsm.ko
kernel/lib/ts_bm.ko
kernel/lib/crc-ccitt.ko
kernel/drivers/scsi/scsi_wait_scan.ko
kernel/drivers/net/tun.ko
kernel/drivers/net/slhc.ko
kernel/drivers/net/pppox.ko
kernel/drivers/net/pppoe.ko
kernel/drivers/net/ppp_synctty.ko
kernel/drivers/net/ppp_mppe.ko
kernel/drivers/net/ppp_generic.ko
kernel/drivers/net/ppp_deflate.ko
kernel/drivers/net/ppp_async.ko
kernel/drivers/net/bsd_comp.ko
kernel/crypto/zlib.ko
kernel/crypto/lzo.ko
kernel/crypto/deflate.ko
But if I try:
iptables -t nat -L | grep -q "MASQUERADE"
I get:
iptables v1.4.14: can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
And dmesg:
nf_conntrack: disagrees about version of symbol register_sysctl_paths
nf_conntrack: Unknown symbol register_sysctl_paths (err -22)
nf_conntrack: disagrees about version of symbol skb_copy_bits
nf_conntrack: Unknown symbol skb_copy_bits (err -22)
nf_conntrack: disagrees about version of symbol seq_open_net
nf_conntrack: Unknown symbol seq_open_net (err -22)
nf_conntrack: disagrees about version of symbol nf_afinfo
nf_conntrack: Unknown symbol nf_afinfo (err -22)
nf_conntrack: Unknown symbol nf_conntrack_destroy (err 0)
nf_conntrack: Unknown symbol nf_ct_destroy (err 0)
nf_conntrack: disagrees about version of symbol register_pernet_subsys
nf_conntrack: Unknown symbol register_pernet_subsys (err -22)
nf_conntrack: disagrees about version of symbol unregister_sysctl_table
nf_conntrack: Unknown symbol unregister_sysctl_table (err -22)
nf_conntrack: disagrees about version of symbol init_net
nf_conntrack: Unknown symbol init_net (err -22)
nf_conntrack: disagrees about version of symbol seq_release_net
nf_conntrack: Unknown symbol seq_release_net (err -22)
nf_conntrack: disagrees about version of symbol register_net_sysctl_table
nf_conntrack: Unknown symbol register_net_sysctl_table (err -22)
nf_conntrack: disagrees about version of symbol nla_put
nf_conntrack: Unknown symbol nla_put (err -22)
nf_conntrack: disagrees about version of symbol proc_net_remove
nf_conntrack: Unknown symbol proc_net_remove (err -22)
nf_conntrack: disagrees about version of symbol unregister_pernet_subsys
nf_conntrack: Unknown symbol unregister_pernet_subsys (err -22)
nf_conntrack: disagrees about version of symbol nf_log_packet
nf_conntrack: Unknown symbol nf_log_packet (err -22)
nf_conntrack: disagrees about version of symbol proc_net_fops_create
nf_conntrack: Unknown symbol proc_net_fops_create (err -22)
nf_conntrack: Unknown symbol ip_ct_attach (err 0)
nf_conntrack: disagrees about version of symbol unregister_net_sysctl_table
nf_conntrack: Unknown symbol unregister_net_sysctl_table (err -22)
nf_conntrack: disagrees about version of symbol register_sysctl_paths
nf_conntrack: Unknown symbol register_sysctl_paths (err -22)
nf_conntrack: disagrees about version of symbol skb_copy_bits
nf_conntrack: Unknown symbol skb_copy_bits (err -22)
nf_conntrack: disagrees about version of symbol seq_open_net
nf_conntrack: Unknown symbol seq_open_net (err -22)
nf_conntrack: disagrees about version of symbol nf_afinfo
nf_conntrack: Unknown symbol nf_afinfo (err -22)
nf_conntrack: Unknown symbol nf_conntrack_destroy (err 0)
nf_conntrack: Unknown symbol nf_ct_destroy (err 0)
nf_conntrack: disagrees about version of symbol register_pernet_subsys
nf_conntrack: Unknown symbol register_pernet_subsys (err -22)
nf_conntrack: disagrees about version of symbol unregister_sysctl_table
nf_conntrack: Unknown symbol unregister_sysctl_table (err -22)
nf_conntrack: disagrees about version of symbol init_net
nf_conntrack: Unknown symbol init_net (err -22)
nf_conntrack: disagrees about version of symbol seq_release_net
nf_conntrack: Unknown symbol seq_release_net (err -22)
nf_conntrack: disagrees about version of symbol register_net_sysctl_table
nf_conntrack: Unknown symbol register_net_sysctl_table (err -22)
nf_conntrack: disagrees about version of symbol nla_put
nf_conntrack: Unknown symbol nla_put (err -22)
nf_conntrack: disagrees about version of symbol proc_net_remove
nf_conntrack: Unknown symbol proc_net_remove (err -22)
nf_conntrack: disagrees about version of symbol unregister_pernet_subsys
nf_conntrack: Unknown symbol unregister_pernet_subsys (err -22)
nf_conntrack: disagrees about version of symbol nf_log_packet
nf_conntrack: Unknown symbol nf_log_packet (err -22)
nf_conntrack: disagrees about version of symbol proc_net_fops_create
nf_conntrack: Unknown symbol proc_net_fops_create (err -22)
nf_conntrack: Unknown symbol ip_ct_attach (err 0)
nf_conntrack: disagrees about version of symbol unregister_net_sysctl_table
nf_conntrack: Unknown symbol unregister_net_sysctl_table (err -22)
I read in http://www.readynas.com/forum/viewtopic.php?f=35&t=63015#p358242 that iptables modules require probably to recompile the kernel and not only modules and install the kernel in the system because some modules need some modification in the kernel itself. But the guy seem to be in trouble once the kernel replaced...
So is there any way to make iptables working on readynas OS 6.0.x ?
Thank you for you help.
Related Content
- Mar 10, 2018Retired_Member
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!