I have just ordered a new super server 2.4 which has just been made live.

I requested Debian but no extras.

Now I want to use the firewall package I have used for ages (http://projectfiles.com/firewall/) but find the kernel on the system is 2.4.26bf2.4 without netfilter support.

I need to know what hardware is in the machine so that I can compile a new kernel, whilst leaving the old one as an option on lilo in case of failed boot up.

I have stared a ticket for this (405984PLNT).

The server only has one IDE HD.

Anyone tried this berfore?

Any help appreciated.

Regards PKing (yes my name is PKing - or Peter King)

If you have not done so, perhaps in your ticket you could have support install the netfilter support for you. No harm trying

I have asked them to do it but they want to charge me $75. I thought the Silver maintenance was supposed to cover these problems.

A bit of a mistake since this is only a test server to see what the company is like.
The servers we shall be taking from them are the Mid level SCSI P2800SS from theplanet (which I don't fancy recompiling the kernel for since it is sure to use some third party driver for the SCSI RAID card).

If however I have to start adding the $75 for kernel additions plus any more work required to get the server ready to the setup cost, then they might price themselves out of the contest. The contest is that we are also testing servers with Layeredtech who are cheaper but do not offer the telephone support (not that it has been much good up to now).

That is why we are having the servers on a month contract without setup costs so we can ditch the one that doesn't perform. The pay the extra setup cost to reduce the monthly billing.

PS we are a UK web site design company so all the sites on the servers will be accessed from the UK. So far it seems the servers in servermatrix aren't that fast. Anyone else trying from the UK?

Only for supported operating systems (RHE, windows, possibly freeBSD)


We don't have any problems from the UK with either Servermatrix or ThePlanet servers.

Maybe someone can recommend a simple firewall script similar to that of http://projectfiles.com/firewall

Which is a one line config of allow these IP's or these ports etc.

This one uses netfilter which isn't present in our kernel.

If you can suggest an alternative that does not require netfilter then please help.

[quote=Paul][quote=sitedesign]I have asked them to do it but they want to charge me $75. I thought the Silver maintenance was supposed to cover these problems.[/quote]Only for supported operating systems (RHE, windows, possibly freeBSD)[/quote]
Nope, R HELL and windows only.
and also, may i just say, that its anything but brainsurgery on fbsd to recompile a kernel

[quote=Paul][quote=sitedesign]PS we are a UK web site design company so all the sites on the servers will be accessed from the UK. So far it seems the servers in servermatrix aren't that fast. Anyone else trying from the UK?[/quote]We don't have any problems from the UK with either Servermatrix or ThePlanet servers.[/quote][/quote]

Agreed, i've been able to saturate the 10Mbit at my uni many a time from my SM boxes

and at another uni in the same city, i was getting a good 40Mbit no bother

I have noticed in the config file that NETFILTER is compiled as modules. (See below) How do I go about loading them?

# IP: Netfilter Configuration
#
CONFIG_IP_NF_CONNTRACK=m
CONFIG_IP_NF_FTP=m
CONFIG_IP_NF_AMANDA=m
CONFIG_IP_NF_TFTP=m
CONFIG_IP_NF_IRC=m
CONFIG_IP_NF_QUEUE=m
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_LIMIT=m
CONFIG_IP_NF_MATCH_MAC=m
CONFIG_IP_NF_MATCH_PKTTYPE=m
CONFIG_IP_NF_MATCH_MARK=m
CONFIG_IP_NF_MATCH_MULTIPORT=m
CONFIG_IP_NF_MATCH_TOS=m
CONFIG_IP_NF_MATCH_RECENT=m
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_DSCP=m
CONFIG_IP_NF_MATCH_AH_ESP=m
CONFIG_IP_NF_MATCH_LENGTH=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_MATCH_TCPMSS=m
CONFIG_IP_NF_MATCH_HELPER=m
CONFIG_IP_NF_MATCH_STATE=m
CONFIG_IP_NF_MATCH_CONNTRACK=m
CONFIG_IP_NF_MATCH_UNCLEAN=m
CONFIG_IP_NF_MATCH_OWNER=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_MIRROR=m
CONFIG_IP_NF_NAT=m
CONFIG_IP_NF_NAT_NEEDED=y
CONFIG_IP_NF_TARGET_MASQUERADE=m
CONFIG_IP_NF_TARGET_REDIRECT=m
CONFIG_IP_NF_NAT_AMANDA=m
# CONFIG_IP_NF_NAT_LOCAL is not set
CONFIG_IP_NF_NAT_SNMP_BASIC=m
CONFIG_IP_NF_NAT_IRC=m
CONFIG_IP_NF_NAT_FTP=m
CONFIG_IP_NF_NAT_TFTP=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_TOS=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_DSCP=m
CONFIG_IP_NF_TARGET_MARK=m
CONFIG_IP_NF_TARGET_LOG=m
CONFIG_IP_NF_TARGET_ULOG=m
CONFIG_IP_NF_TARGET_TCPMSS=m
CONFIG_IP_NF_ARPTABLES=m
CONFIG_IP_NF_ARPFILTER=m
CONFIG_IP_NF_ARP_MANGLE=m
CONFIG_IP_NF_COMPAT_IPCHAINS=m
CONFIG_IP_NF_NAT_NEEDED=y
CONFIG_IP_NF_COMPAT_IPFWADM=m
CONFIG_IP_NF_NAT_NEEDED=y