Dear list, I want to compile my kernel, should I include the ipfilter modules or should I make modules. What is safer, faster and less work (I mean to administrate)? Ciao ;-) Robert Rottscholl - DE
I want to compile my kernel, should I include the ipfilter modules or should I make modules. What is safer, faster and less work (I mean to administrate)?
Hello Robert! I think it's neither more nor less work to compile them as modules. But if you do so, you should be able to up-grade your system easier than with incompiled code. CU Christian
Dear list,
I want to compile my kernel, should I include the ipfilter modules or should I make modules. What is safer, faster and less work (I mean to administrate)?
safer : should be to compile in kernel, cauze ]you[ cannot replace the modules and have to reboot the box to manipulate iptables-code faster : me think, should be faster to compile in kernel, cauze you havent the module layer and no load/unload - correct me, if i'am wrong less work: too to compile in the kernel, cauze you will not get any probs with depmod and other stuff In summary: if the netfilter is an elemtary part of your system put it in the kernel - so why not. Michael
safer : should be to compile in kernel, cauze ]you[ cannot replace the modules and have to reboot the box to manipulate iptables-code
faster : me think, should be faster to compile in kernel, cauze you havent
Not bad ... the module
layer and no load/unload - correct me, if i'am wrong
not bad either
less work: too to compile in the kernel, cauze you will not get any probs with depmod and other stuff
In summary: if the netfilter is an elemtary part of your system put it in
still not bad... the kernel - so why
not.
But by the way: What if he uses SuSEfirewall (it tries to start iptables / ipchains (version-depending))? CU Christian
Thanks 4 the rating - but why ? Even if your last comment is version-depending. Nice weekend Michael Appeldorn
safer : should be to compile in kernel, cauze ]you[ cannot replace the modules and have to reboot the box to manipulate iptables-code
Not bad ...
faster : me think, should be faster to compile in kernel, cauze you havent the module layer and no load/unload - correct me, if i'am wrong
not bad either
less work: too to compile in the kernel, cauze you will not get any probs with depmod and other stuff
still not bad...
In summary: if the netfilter is an elemtary part of your system put it in the kernel - so why not.
But by the way: What if he uses SuSEfirewall (it tries to start iptables / ipchains (version-depending))?
It probably means kernel version:
2.2.x - ipchains
2.4.x - iptables
Although the message was concerning iptables which would mean 2.4.x kernel.
02/08/02 08:44:36 AM, Michael Appeldorn
Thanks 4 the rating - but why ? Even if your last comment is version-depending.
Nice weekend
Michael Appeldorn
safer : should be to compile in kernel, cauze ]you[ cannot replace the modules and have to reboot the box to manipulate iptables-code
Not bad ...
faster : me think, should be faster to compile in kernel, cauze you havent the module layer and no load/unload - correct me, if i'am wrong
not bad either
less work: too to compile in the kernel, cauze you will not get any probs with depmod and other stuff
still not bad...
In summary: if the netfilter is an elemtary part of your system put it in the kernel - so why not.
But by the way: What if he uses SuSEfirewall (it tries to start iptables / ipchains (version-depending))?
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
participants (4)
-
Christian Weickhmann -
James Bliss -
Michael Appeldorn -
Robert Rottscholl