[elrepo-devel] ip6t_TCPMSS is missing in kernel

[Alan Bartlett]

On 15 July 2011 07:31, Michel van Dop <mvandop at xs4all.nl> wrote:
>
> Sorry, i just wake up.
>
> And now the good one:
>
> [root at linux2 ~]# cat /boot/config-2.6.39-2.el5.elrepo | grep -i ip6
> CONFIG_IPV6_MIP6=m
>
> CONFIG_IP6_NF_QUEUE=m
> CONFIG_IP6_NF_IPTABLES=m
> CONFIG_IP6_NF_MATCH_AH=m
> CONFIG_IP6_NF_MATCH_EUI64=m
> CONFIG_IP6_NF_MATCH_FRAG=m
> CONFIG_IP6_NF_MATCH_OPTS=m
> CONFIG_IP6_NF_MATCH_HL=m
> CONFIG_IP6_NF_MATCH_IPV6HEADER=m
> CONFIG_IP6_NF_MATCH_MH=m
> CONFIG_IP6_NF_MATCH_RT=m
> CONFIG_IP6_NF_TARGET_HL=m
> CONFIG_IP6_NF_TARGET_LOG=m
> CONFIG_IP6_NF_FILTER=m
> CONFIG_IP6_NF_TARGET_REJECT=m
> CONFIG_IP6_NF_MANGLE=m
> CONFIG_IP6_NF_RAW=m
> CONFIG_IP6_NF_SECURITY=m
> CONFIG_BRIDGE_EBT_IP6=m
> # CONFIG_SLIP_MODE_SLIP6 is not set

Thank you, Michel. However I am still puzzled with regards to the
comment made by the firewall package supplier:

"ip6t_TCPMSS is missing (I assume you forgot to enable it when you
compiled your kernel)."

I spent quite a bit of time, yesterday, in going through the kernel
configuration and there is absolutely no match for "ip6t_TCPMSS". Will
you please pass a copy of the configuration file
(/boot/config-2.6.39-2.el5.elrepo) to the firewall package supplier
and ask if they would review it, indicating what needs to be
re-configured to allow their product to be used?

Regards,
Alan.