In order to use the LEAF firewall you will need to install the modules that will be loaded to complement your kernel. You will need one for your ethernet card(s) in particular.
Modules can be stored in two different places:
In /boot/lib/modules
: these modules will be
loaded at the very begining of the boot process. This facility is used
to load drivers which will be necessary in order to be able to load the
remaining of the packages (CD-ROM or Hard-disk drivers for examples when
you are booting off those media: cf. the "Using
Bering-uClibc with an IDE harddisk or CD-ROM drive" section of
the Bering-uClibc user's guide). These modules will be saved in the
initrd.lrp package. None are provided by default in the LEAF
distribution since most users won't need any. If you use this facility,
you will also need to edit /boot/etc/modules
in
order to declare the sequence of modules you want to load at this
stage.
In /lib/modules
: these modules are provided
by the modules.lrp package which is loaded as any other package. This
package should provide most - if not all - of the modules required to
have the LEAF firewall working on your specific hardware. You will also
need to edit /etc/modules
in order to declare the
sequence of modules you want to load.
By default, the modules.lrp package of the LEAF Bering-uClibc firewall provides:
# ls -la total 352 drwxr-x--- 2 root root 4096 2004-04-28 20:44 . drwxr-xr-x 3 root root 4096 2003-05-27 12:19 .. -rw-r--r-- 1 root root 21212 2004-06-19 10:45 8139too.o -rw-r--r-- 1 root root 9180 2004-06-19 10:45 8390.o -rw-r--r-- 1 root root 4316 2004-06-19 10:45 crc32.o -rw-r--r-- 1 root root 27304 2004-06-19 10:45 eepro100.o -rw-r--r-- 1 root root 33718 2004-06-19 10:45 ip_conntrack.o -rw-r--r-- 1 root root 5368 2004-06-19 10:45 ip_conntrack_ftp.o -rw-r--r-- 1 root root 5260 2004-06-19 10:45 ip_conntrack_irc.o -rw-r--r-- 1 root root 4284 2004-06-19 10:45 ip_nat_ftp.o -rw-r--r-- 1 root root 3664 2004-06-19 10:45 ip_nat_irc.o -rw-r--r-- 1 root root 2992 2004-06-19 10:45 ipt_MASQUERADE.o -rw-r--r-- 1 root root 1888 2004-06-19 10:45 ipt_REDIRECT.o -rw-r--r-- 1 root root 2116 2004-06-19 10:45 ipt_conntrack.o -rw-r--r-- 1 root root 1800 2004-06-19 10:45 ipt_helper.o -rw-r--r-- 1 root root 1628 2004-06-19 10:45 ipt_state.o -rw-r--r-- 1 root root 25946 2004-06-19 10:45 iptable_nat.o -rw-r--r-- 1 root root 4484 2004-06-19 10:45 mii.o -rw-r--r-- 1 root root 9668 2004-06-19 10:45 n_hdlc.o -rw-r--r-- 1 root root 22980 2004-06-19 10:45 natsemi.o -rw-r--r-- 1 root root 7868 2004-06-19 10:45 ne2k-pci.o -rw-r--r-- 1 root root 10324 2004-06-19 10:45 ppp_async.o -rw-r--r-- 1 root root 5384 2004-06-19 10:45 ppp_deflate.o -rw-r--r-- 1 root root 25636 2004-06-19 10:45 ppp_generic.o -rw-r--r-- 1 root root 14592 2004-06-19 10:45 ppp_mppe.o -rw-r--r-- 1 root root 8392 2004-06-19 10:45 ppp_synctty.o -rw-r--r-- 1 root root 11792 2004-06-19 10:45 pppoe.o -rw-r--r-- 1 root root 3684 2004-06-19 10:45 pppox.o -rw-r--r-- 1 root root 6744 2004-06-19 10:45 slhc.o -rw-r--r-- 1 root root 4312 2004-06-19 10:45 softdog.o
crc32, 8390, 8139too, eepro100, mii.o, natsemi and ne2k-pci are drivers for common network cards.
n_hdlc, ppp_generic, ppp_async, ppp_synctty, ppp_mppe, pppoe, pppox, slhc are ppp and ppp/pppoe related modules.
ip_conntrack_*,ipt_ and ip_nat_* modules are use for masquerading.
You will probably need to download other modules for your own network card or to get access to specific functionalities (bridge.o for bridging, ...). The whole set of Bering-uClibc linux kernel modules for our releases is available as modules tarball at the Bering-uClibc FRS area of sourceforge.net for most of the released versions. If you can't find one for a minor or beta releases look for an older one - it won't have changed.