Cacko Rom 1.23 Is Released, Full version Options

[maslovsky]

Cacko ROM 1.23 is released. Supporting Zaurus models are: SL-C1000, SL-C3100/SL-C3200 in addition to SL-C7x0/SL-C860. Note that SL-C3000 is not supported yet, but I hope Andy (aka iamasmith) will release proper version soon.

Please, visit http://cacko.biz/cacko/ for download links.

Enjoy and remember that donations are always welcome

Important! Main Cacko feed has not been updated yet, please, use Cacko feed mirror:

http://web.mol.ru/~zaurus/feed/

---------------------------------------------------------

CACkO Zaurus Qtopia ROM 1.23 1029311005 (SL-C1000) "Nastya"
Mon Oct 31 10:35:34 MSK 2005

© Cacko Team (http://cacko.biz), 2003-2005

Visit our web site for more information: http://cacko.biz/cacko/
Make sure to read FAQ at http://cacko.biz/cacko/faq
Report bugs at http://cacko.biz/cacko/bugs

IMPORTANT: This ROM requries a flash partition at least 32 MBytes in size!
Make sure to repartition your internal flash before updating ROM!

Installation:

1. Extract the 3 files - initrd.bin tools.tar updater.sh - to the root of your CF or SD/MMC card.
2. Make sure that Zaurus isn't plugged into AC power.
3. Remove battery for at least 5 seconds.
4. Replace battery (replace battery cover, lock cover), plug in AC power.
5. Press and hold the "OK" button on the keyboard.
6. Turn the power on, you should see the Japanese service menu.
7. Now Plug in the Power Cord. (You will get an error if it isn't plugged in!)
8. Select option 4 (flash/update).
9. You then have several options including CF and SD
10. Choose either CF or SD, depending on which media you put the files on.

11. Select "3 NAND Flash Utils"
12. Select "1 Resize root partition"
13. Enter 32 when prompted for root partition size.
12. Flash will be repartioned and Zaurus will reboot.

13. Repeat steps 2-10 again and wait for the menu start menu.
14. Now select "1 Install new ROM" and wait. Reboot your Zaurus when ROM installaiton is complete.

-------------

Release Notes:

This ROM version wa smainly intended to support Zaurus models (C1000 and C3100). Later on it was decided to include support for older models as well. It also insludes some minor updates and fixes found during 1.22 ROM usage.

Many thanks to all the beta testers who have contributed a lot of efforts to help produce this ROM.

Changes:

Kernel:
- Added Cacko boot logo (every other ROM already had one
- Added latest kernel patches from Tetsu
- Added MTD emulation module (blkmtd.o) for block devices (to mount jffs2 images on Zaurus)
- Enabled detection of SCSI Multi-LUN (Logical Unit Number) devices, such as multi-format card readers
- Updated kayboard map to include some missing characters in console
- Updated serial driver (thanks to albertr and 2x4ever)
- serial_cs driver is built as module, so that it can be easily updated
- Included updated USB storage and serial drivers from 2.4.31 kernel
- SCSI drivers are build as modules
- Cursor blinking rate in pure Linux console is configurable via /proc/sys/dev/fb/cursor_blink_rate

File Systems:
- Squashfs filesystem updated to version 2.2
- Added NTFS module
- Added HFS and HFS+ (Apple File System) modules
- Added ISO/Joliet (CD-ROM) and UDF (DVD) modules
- Added support for new partition types: Macintosh and Win2K Dynamic Disk
- Updated FUSE to version 1.4 (latest verison available for 2.4.x kernels)

Networking:
- Updated OpenSSL package to 0.9.7g
- Updated OpenSSH package to 4.1p1.
Note that empty passwords are not allowed by default! Set root password to be able to login via SSH
- Updated networking scripts to clean up DHCP leftovers
- Added PPP Deflate compression option, updated aliases in modules.conf
- Updated pppd to 2.4.3
- Bringing usbd0 interface down during suspend
- Updated Pegasus USB Network drivers to 0.4.32
- Updated RTL 8150 USB Network drivers to 0.4.3
- Included driver modules to support for USB Ethernet devices
- Included driver modules for Serial USB devices
- Increased DHCP timeout for LAN network connections
- Updated configuration entry for TRENDnet TE-CF100 Fast Ethernet CF Adapter
- Updated USBNET driver from 2.4.32 kernel source, supporting many USB Ethernet dongles
- Added USB Network applet to configure network using USB Ethernet dongles
- Updated wget to 1.10.2, build with SSL support

Wireless:
- Wireless Extentions updated to v16
- Wireless Tools updated to 0.27
- Hostap drivers updated to version 0.3.7
- Orinoco/Spectrum driver updated to 0.15rc2-CVS (with monitor mode)
- Added drivers for USB Prism and Orinoco based wireless devices
- Socket/Symbol WiFi card is now fully supported via Network Setup
- New Socket WiFi card (with Agere Hermes II chipset) is supported (OpenKey WEP only)
- Fixed problem with non-specific ("Any") ESSID
- Added entry for "WAVEline Compact Flash Wireless Adapter"
- Added support for Prism3 WiFi cards without firmware in flash,
such as "IO Data WN-B11/CFZ Wireless CF Adapter" and "PLANEX GW-CF11X Wireless CF Card"
- Changed interface name for wireless cards from ethX to commonly used wlanX

Bluetooth:
- Updated bluez library and utilities to version 2.21, hcidump to 2.21
- Improved support for USB bluetooth devices
- Updated bluetooth dialup network applet (thanks to Michail Kostousov).
New applet allows to configure multiple rfcomm entries.
- Fixed problem with network icon not appearing in TaskBar with some serial bluetooth CF cards

ROM:
- Updated tinylogin to 1.4
- Updated unrar to version 3.5.4
- Updated Card Manager utilities to 3.2.7
- Added cpio 2.6
- Updated sed to 4.0.7
- Updated readline library to patchlvel 5
- Updated bash to patchlevel 16
- Added patched version of USB library (fixes ARM alignment issues)
- Updated usb.ids file
- Updated scmxx utility to 0.8.0
- Updated configuration scripts to better support USB joysticks and joypads

Qtopia:
- Kino2 is updated to version 0.4.3c
- Latest versions of mplayer 1.1.5 and bvdd 0.4 video driver are included
- Latest Sharp applications included: PIM apps from C1000 and C3100, Photostorage, MusicPayer, Netfront 3.1
- Added new keymaps: esperanto, catalan, espanyol and cyrillic-phonetic-psion
- Updated Deutsch keymap (thanks to Andre Beckedorf)
- Added PickBoard input method
- Updated neocal to 1.7.7
- Made it possible to remove Qtopia background image
- Made it possible to create a swap file in internal flash or built-in hard disk
- Added InputHelper applet to support USB mouse in Qtopia
- Added some missing mime types
- QKonsole launch speed has been improved
- Updated Sysinfo application to display information about attached devices
- Updated Card Monitor applet not to display popup messages
- PIM data is send via IRDA with UTF-8 encoding
- SDL libraty has been removed form the ROM. Updated library optimized for PXA270 should be installed separately.

[gsgmx]

Hi,

made yesterday the switch to 1.23 on my c1000.

Great! Thanks alot Anton.


One point i can･t get to run as expected is iptables.
Neither by hand myself nor with the simple snowfence.
Generally it works, but missing is the iptables state module.
By design?

CODE

# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables v1.2.11: Couldn't load match `state':/usr/lib/iptables/libipt_state.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.  

These modules can be found:

CODE

# ls -al /usr/lib/iptables/
drwxr-xr-x    2 root     root            0 Nov  4 13:41 .
drwxr-xr-x    8 root     root            0 Nov  4 13:41 ..
lrwxrwxrwx    1 root     root           36 Nov  4 13:41 libipt_DNAT.so -> /usr/lib.rom/iptables/libipt_DNAT.so
lrwxrwxrwx    1 root     root           42 Nov  4 13:41 libipt_MASQUERADE.so -> /usr/lib.rom/iptables/libipt_MASQUERADE.so
lrwxrwxrwx    1 root     root           40 Nov  4 13:41 libipt_REDIRECT.so -> /usr/lib.rom/iptables/libipt_REDIRECT.so
lrwxrwxrwx    1 root     root           40 Nov  4 13:41 libipt_standard.so -> /usr/lib.rom/iptables/libipt_standard.so
lrwxrwxrwx    1 root     root           35 Nov  4 13:41 libipt_tcp.so -> /usr/lib.rom/iptables/libipt_tcp.so
lrwxrwxrwx    1 root     root           35 Nov  4 13:41 libipt_udp.so -> /usr/lib.rom/iptables/libipt_udp.so                                          

I checked the different iptables ipks from the feed, nothing there neiher.

Could i compile the missing module myself? If so -- sorry -- how?


Like preinstalled Opera very much. On original i had instelled 7.55 now we have 7.25. Does anybody know which difference exists between these two?


TiA
Georg

[maslovsky]

One point i can･t get to run as expected is iptables.
Neither by hand myself nor with the simple snowfence.
Generally it works, but missing is the iptables state module.
By design?

You need iptables-extra package from the Cacko feed.

[gsgmx]

One point i can･t get to run as expected is iptables.
Neither by hand myself nor with the simple snowfence.
Generally it works, but missing is the iptables state module.
By design?

You need iptables-extra package from the Cacko feed.

Thanks Anton,
but sorry thats only part of the picture, i posted wrong.

What i did first, before posting:
try iptables - no state
install iptables-extra - still no state, different msg (see below)
thought maybe some of the buildin iptables is wrong, so installed some of the other (lite)iptables (don#t remember which it was) ipk from the feed - trial and error. Was error, so do a restore of the system.

After the restore i forgot to install iptables-extra again.
I posted the wrong error first.

Now this is what happens when i try the state-rule after having iptables-extra installed

CODE

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: No chain/target/match by that name.

I'm new to iptables, until now i use most times fw routers.
I thought give my debian sarge system a try, it has iptables 1.2.11 too.

On Debian

CODE

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

works immediately and with lsmod i find ip_conntrack and ipt_state as addtional modules loaded. They exist both for the 2.6.12 as the 2.4.27 kernels on the debian system, but on the ZAURUS i can't find any file of that name and they are neither loaded by the iptables command nor can i modprobe/insmod/... them.

So there is still something missing ....

TIA George

[maslovsky]

So there is still something missing ....

iptables modules package maybe?

[gsgmx]

So there is still something missing ....

iptables modules package maybe?

Hi Anton,

would be great if it were.

The only iptables-modules i can find are:
iptables-modules-2.4.20_1.23-lite-1_arm.ipk (and ...2.4.18_...)
both are "lite" so i assume they are for the lite kernel.
Anyhow i took it from the cacko.biz/cacko/feed/ manually, and browsed thru the ipk archive with mc. I can locate within there only the exactly same kernel modules as are already in the
/lib/modules.rom/2.4.20/kernel/net/ipv4/netfilter/

In
/lib/modules/..../netfilter/ on the zaurus i find same named links to the files in the above dir.
E.g. ipt_REJECT.o links to
/lib/modules.rom/2.4.20/kernel/net/ipv4/netfilter/ipt_REJECT.o

Would i install the lite ipk these links would be replaced by the files from the ipk. Still no ip_conntrack.o and no ipt_state.o as the ipk doesn't have them.
Would i them deinstall this ipk again, the files will be removed but the links won't be restored,
Thats what happened when i installed one lite ipk in my first trial, see my previous post.
So i will not try the lite iptables-modules. Is there some other ipk where the missing modules could be found?

regards,
George

[maslovsky]

Thats what happened when i installed one lite ipk in my first trial, see my previous post.
So i will not try the lite iptables-modules.  Is there some other ipk where the missing modules could be found?

regards,
George

I'll check tomorrow ifsome of the modules are still missing from the package.

[gsgmx]

Thats what happened when i installed one lite ipk in my first trial, see my previous post.
So i will not try the lite iptables-modules.  Is there some other ipk where the missing modules could be found?

regards,
George

I'll check tomorrow ifsome of the modules are still missing from the package.

Hello Anton,

i had found an older version of the iptables-extra (Jan 2005) from the cacko feed which i had dled in September. looking into it shows
a) has been made for 2.4.18-rmk7-pxa3-embedix kernel
b) contains a tree /lib/modules/..../ipv4/netfilter/ with the ip_conntrack.o and ip_state.o
c) contains a tree /usr/lib/iptables/


comparing this with the current ipk shows the whole tree b) is not there, only /usr/lib/iptables/

perhaps something in packaging went wrong?

Thanks
George

[maslovsky]

Hello Anton,

i had found an older version of the iptables-extra  (Jan 2005) from the cacko feed which i had dled  in September.  looking into it shows
a) has been made for 2.4.18-rmk7-pxa3-embedix kernel
contains a tree /lib/modules/..../ipv4/netfilter/ with the ip_conntrack.o and ip_state.o
c) contains a tree /usr/lib/iptables/


comparing this with the current ipk shows the whole tree is not there, only /usr/lib/iptables/

perhaps something in packaging went wrong?

Thanks
George

Kernel modules are in separate package iptables-modules

[gsgmx]

Hello Anton,

i had found an older version of the iptables-extra  (Jan 2005) from the cacko feed which i had dled  in September.  looking into it shows
a) has been made for 2.4.18-rmk7-pxa3-embedix kernel
b) contains a tree /lib/modules/..../ipv4/netfilter/ with the ip_conntrack.o and ip_state.o
c) contains a tree /usr/lib/iptables/


comparing this with the current ipk shows the whole tree b) is not there, only /usr/lib/iptables/

perhaps something in packaging went wrong?

Thanks
George

Kernel modules are in separate package iptables-modules

Hi Anton,

no, there is not any iptables modules ipk which contains the missing conntrack* and state kernel modules.
See my previous msg about the iptables-modules (lite) ipk on the cacko feed. I have analyzed them all.
My msg about the iptables-extra diff between old and current version was a hint that in the past the missing kernel modules could be found in the extra ipk but nowdays aren't there anymore:

the contents:

CODE

iptables-extras_1.2.11-2_arm.1.ipk  January 2005 version:

/lib/modules/2.4.18-rmk7-pxa3-embedix/kernel/net/ipv4/netfilter

total 784
-rw-r--r--   1 root  admin  28056 25 Nov  2004 ip_conntrack.o      !!!
-rw-r--r--   1 root  admin   6036 25 Nov  2004 ip_conntrack_ftp.o  !!!
-rw-r--r--   1 root  admin   4172 25 Nov  2004 ip_conntrack_irc.o  !!!
-rw-r--r--   1 root  admin   5000 25 Nov  2004 ip_nat_ftp.o        !!!
-rw-r--r--   1 root  admin   4348 25 Nov  2004 ip_nat_irc.o        !!!
-rw-r--r--   1 root  admin  14220 25 Nov  2004 ip_nat_snmp_basic.o !!!
-rw-r--r--   1 root  admin  10660 25 Nov  2004 ip_queue.o          !!!
-rw-r--r--   1 root  admin  20432 25 Nov  2004 ip_tables.o
-rw-r--r--   1 root  admin  60151  2 Nov  2004 ipchains.o          ***
-rw-r--r--   1 root  admin  57389  2 Nov  2004 ipfwadm.o           ***
-rw-r--r--   1 root  admin   6388 25 Nov  2004 ipt_LOG.o
-rw-r--r--   1 root  admin   1792 25 Nov  2004 ipt_MARK.o
-rw-r--r--   1 root  admin   3112 25 Nov  2004 ipt_MASQUERADE.o    !!!
-rw-r--r--   1 root  admin   2760 25 Nov  2004 ipt_MIRROR.o
-rw-r--r--   1 root  admin   1872 25 Nov  2004 ipt_REDIRECT.o
-rw-r--r--   1 root  admin   5648 25 Nov  2004 ipt_REJECT.o
-rw-r--r--   1 root  admin   4228 25 Nov  2004 ipt_TCPMSS.o
-rw-r--r--   1 root  admin   2320 25 Nov  2004 ipt_TOS.o
-rw-r--r--   1 root  admin   5124 25 Nov  2004 ipt_ULOG.o
-rw-r--r--   1 root  admin   1664 25 Nov  2004 ipt_ah.o
-rw-r--r--   1 root  admin   1664 25 Nov  2004 ipt_esp.o
-rw-r--r--   1 root  admin   1632 25 Nov  2004 ipt_length.o
-rw-r--r--   1 root  admin   2264 25 Nov  2004 ipt_limit.o
-rw-r--r--   1 root  admin   1772 25 Nov  2004 ipt_mac.o
-rw-r--r--   1 root  admin   1416 25 Nov  2004 ipt_mark.1.o
-rw-r--r--   1 root  admin   1784 25 Nov  2004 ipt_multiport.o
-rw-r--r--   1 root  admin   2656 25 Nov  2004 ipt_owner.o
-rw-r--r--   1 root  admin   1704 25 Nov  2004 ipt_state.o         !!!
-rw-r--r--   1 root  admin   1948 25 Nov  2004 ipt_tcpmss.1.o
-rw-r--r--   1 root  admin   1412 25 Nov  2004 ipt_tos.1.o
-rw-r--r--   1 root  admin   1868 25 Nov  2004 ipt_ttl.o
-rw-r--r--   1 root  admin  10004 25 Nov  2004 ipt_unclean.o
-rw-r--r--   1 root  admin   3200 25 Nov  2004 iptable_filter.o
-rw-r--r--   1 root  admin   3676 25 Nov  2004 iptable_mangle.o
-rw-r--r--   1 root  admin  26129 25 Nov  2004 iptable_nat.o       !!!

in 1.23 cacko full these files are included in "ROM":
/lib/modules.rom/2.4.20/kernel/net/ipv4/netfilter/

CODE

total 344

-rwxrwxrwx   1 root  admin  17184 26 Sep 17:16 arp_tables.o
-rwxrwxrwx   1 root  admin  21956 26 Sep 17:16 ip_tables.o
-rwxrwxrwx   1 root  admin   2656 26 Sep 17:16 ipt_DSCP_target.o
-rwxrwxrwx   1 root  admin   3300 26 Sep 17:16 ipt_ECN_target.o
-rwxrwxrwx   1 root  admin   6872 26 Sep 17:16 ipt_LOG.o
-rwxrwxrwx   1 root  admin   2004 26 Sep 17:16 ipt_MARK_target.o
-rwxrwxrwx   1 root  admin   2960 26 Sep 17:16 ipt_MIRROR.o
-rwxrwxrwx   1 root  admin   6076 26 Sep 17:16 ipt_REJECT.o
-rwxrwxrwx   1 root  admin   4636 26 Sep 17:16 ipt_TCPMSS_target.o
-rwxrwxrwx   1 root  admin   2512 26 Sep 17:16 ipt_TOS_target.o
-rwxrwxrwx   1 root  admin   5780 26 Sep 17:16 ipt_ULOG.o
-rwxrwxrwx   1 root  admin   1740 26 Sep 17:16 ipt_ah.o
-rwxrwxrwx   1 root  admin   1640 26 Sep 17:16 ipt_dscp.o
-rwxrwxrwx   1 root  admin   2252 26 Sep 17:16 ipt_ecn.o
-rwxrwxrwx   1 root  admin   1744 26 Sep 17:16 ipt_esp.o
-rwxrwxrwx   1 root  admin   1692 26 Sep 17:16 ipt_length.o
-rwxrwxrwx   1 root  admin   2432 26 Sep 17:16 ipt_limit.o
-rwxrwxrwx   1 root  admin   1864 26 Sep 17:16 ipt_mac.o
-rwxrwxrwx   1 root  admin   1472 26 Sep 17:16 ipt_mark.o
-rwxrwxrwx   1 root  admin   1852 26 Sep 17:16 ipt_multiport.o
-rwxrwxrwx   1 root  admin   3396 26 Sep 17:16 ipt_owner.o
-rwxrwxrwx   1 root  admin   1468 26 Sep 17:16 ipt_pkttype.o
-rwxrwxrwx   1 root  admin   2156 26 Sep 17:16 ipt_tcpmss.o
-rwxrwxrwx   1 root  admin   1468 26 Sep 17:16 ipt_tos.o
-rwxrwxrwx   1 root  admin   1988 26 Sep 17:16 ipt_ttl.o
-rwxrwxrwx   1 root  admin  10396 26 Sep 17:16 ipt_unclean.o
-rwxrwxrwx   1 root  admin   3404 26 Sep 17:16 iptable_filter.o
-rwxrwxrwx   1 root  admin   3932 26 Sep 17:16 iptable_mangle.o

as posted before,
/lib/modules/2.4.20/kernel/net/ipv4/netfilter/
contains 1:1 links to every file in /lib/modules.rom/...


The cackofeed
iptables-modules-2.4.20_1.23-lite-1_arm.1.ipk
contains exactly the same modules as the modules.rom above, no wonder, it is probably the missing modules of the lite kernel to have the same funtionality an the full kernel.

CODE

/lib/modules/2.4.20/kernel/net/ipv4/netfilter/

total 344
-rw-r--r--  1 root  admin  17184 26 Sep 17:16 arp_tables.o
-rw-r--r--  1 root  admin  21956 26 Sep 17:16 ip_tables.o
-rw-r--r--  1 root  admin   2656 26 Sep 17:16 ipt_DSCP_target.o
-rw-r--r--  1 root  admin   3300 26 Sep 17:16 ipt_ECN_target.o
-rw-r--r--  1 root  admin   6872 26 Sep 17:16 ipt_LOG.o
-rw-r--r--  1 root  admin   2004 26 Sep 17:16 ipt_MARK_target.o
-rw-r--r--  1 root  admin   2960 26 Sep 17:16 ipt_MIRROR.o
-rw-r--r--  1 root  admin   6076 26 Sep 17:16 ipt_REJECT.o
-rw-r--r--  1 root  admin   4636 26 Sep 17:16 ipt_TCPMSS_target.o
-rw-r--r--  1 root  admin   2512 26 Sep 17:16 ipt_TOS_target.o
-rw-r--r--  1 root  admin   5780 26 Sep 17:16 ipt_ULOG.o
-rw-r--r--  1 root  admin   1740 26 Sep 17:16 ipt_ah.o
-rw-r--r--  1 root  admin   1640 26 Sep 17:16 ipt_dscp.o
-rw-r--r--  1 root  admin   2252 26 Sep 17:16 ipt_ecn.o
-rw-r--r--  1 root  admin   1744 26 Sep 17:16 ipt_esp.o
-rw-r--r--  1 root  admin   1692 26 Sep 17:16 ipt_length.o
-rw-r--r--  1 root  admin   2432 26 Sep 17:16 ipt_limit.o
-rw-r--r--  1 root  admin   1864 26 Sep 17:16 ipt_mac.o
-rw-r--r--  1 root  admin   1472 26 Sep 17:16 ipt_mark.o
-rw-r--r--  1 root  admin   1852 26 Sep 17:16 ipt_multiport.o
-rw-r--r--  1 root  admin   3396 26 Sep 17:16 ipt_owner.o
-rw-r--r--  1 root  admin   1468 26 Sep 17:16 ipt_pkttype.o
-rw-r--r--  1 root  admin   2156 26 Sep 17:16 ipt_tcpmss.o
-rw-r--r--  1 root  admin   1468 26 Sep 17:16 ipt_tos.o
-rw-r--r--  1 root  admin   1988 26 Sep 17:16 ipt_ttl.o
-rw-r--r--  1 root  admin  10396 26 Sep 17:16 ipt_unclean.o
-rw-r--r--  1 root  admin   3404 26 Sep 17:16 iptable_filter.o
-rw-r--r--  1 root  admin   3932 26 Sep 17:16 iptable_mangle.o

i can't find any byte diff or any file more than i have on the 1.23 full.

Looking into the
iptables-modules-2.4.18_1.23-lite-1_arm.1.ipk

shows:

CODE

/lib/modules/2.4.18-rmk7-pxa3-embedix/kernel/net/ipv4/netfilter
total 512
-rw-r--r--  1 root  admin  28056 26 Sep 17:45 ip_conntrack.o
-rw-r--r--  1 root  admin   6036 26 Sep 17:45 ip_conntrack_ftp.o
-rw-r--r--  1 root  admin   4172 26 Sep 17:45 ip_conntrack_irc.o
-rw-r--r--  1 root  admin   5000 26 Sep 17:45 ip_nat_ftp.o
-rw-r--r--  1 root  admin   4348 26 Sep 17:45 ip_nat_irc.o
-rw-r--r--  1 root  admin  14220 26 Sep 17:45 ip_nat_snmp_basic.o
-rw-r--r--  1 root  admin  10660 26 Sep 17:45 ip_queue.o
-rw-r--r--  1 root  admin  20432 26 Sep 17:45 ip_tables.o
-rw-r--r--  1 root  admin   6388 26 Sep 17:45 ipt_LOG.o
-rw-r--r--  1 root  admin   1792 26 Sep 17:45 ipt_MARK.o
-rw-r--r--  1 root  admin   3112 26 Sep 17:45 ipt_MASQUERADE.o
-rw-r--r--  1 root  admin   2760 26 Sep 17:45 ipt_MIRROR.o
-rw-r--r--  1 root  admin   1872 26 Sep 17:45 ipt_REDIRECT.o
-rw-r--r--  1 root  admin   5648 26 Sep 17:45 ipt_REJECT.o
-rw-r--r--  1 root  admin   4228 26 Sep 17:45 ipt_TCPMSS.o
-rw-r--r--  1 root  admin   2320 26 Sep 17:45 ipt_TOS.o
-rw-r--r--  1 root  admin   5124 26 Sep 17:45 ipt_ULOG.o
-rw-r--r--  1 root  admin   1664 26 Sep 17:45 ipt_ah.o
-rw-r--r--  1 root  admin   1664 26 Sep 17:45 ipt_esp.o
-rw-r--r--  1 root  admin   1632 26 Sep 17:45 ipt_length.o
-rw-r--r--  1 root  admin   2264 26 Sep 17:45 ipt_limit.o
-rw-r--r--  1 root  admin   1772 26 Sep 17:45 ipt_mac.o
-rw-r--r--  1 root  admin   1416 26 Sep 17:45 ipt_mark.1.o
-rw-r--r--  1 root  admin   1784 26 Sep 17:45 ipt_multiport.o
-rw-r--r--  1 root  admin   2656 26 Sep 17:45 ipt_owner.o
-rw-r--r--  1 root  admin   1704 26 Sep 17:45 ipt_state.o
-rw-r--r--  1 root  admin   1948 26 Sep 17:45 ipt_tcpmss.1.o
-rw-r--r--  1 root  admin   1412 26 Sep 17:45 ipt_tos.1.o
-rw-r--r--  1 root  admin   1868 26 Sep 17:45 ipt_ttl.o
-rw-r--r--  1 root  admin  10004 26 Sep 17:45 ipt_unclean.o
-rw-r--r--  1 root  admin   3200 26 Sep 17:45 iptable_filter.o
-rw-r--r--  1 root  admin   3676 26 Sep 17:45 iptable_mangle.o
-rw-r--r--  1 root  admin  26129 26 Sep 17:45 iptable_nat.o

here again for the 2.4.18 kernel we find the conntrack* state and nat kernel modules which are not available for the 2.4.20 kernel.



I have marked in the first listing by !!! those modules which are missing now for 2.4.20, as far as i could spot them.
I don't know where to further look for them.
Marked with *** are modules which were there only for 2.2 kernel firewall compatibility, i think they are really not needed anymore

Sorry for thze long post. I think we need all details now otherwise we enter a loop here.

TIA

George