Hi All,

i'm new user of CentOS.
when i start my firewall,
the iptables module ("ip_conntrack_netbios_ns")
got FAILED.

how to add CentOS kernel module so i did not get
FAILED when loading "ip_conntrack_netbios_ns".
when i check with lsmod, it is empty

[root@xyz ~]# lsmod
Module                  Size  Used by
[root@xyz ~]#

btw, how to upgrade kernel of CentOS 5.2?
*I use CentOS 5.2 in Linode 360*
when i check the rpm, i did not found the
kernel package.

[root@xyz ~]# rpm -qa | grep -i kernel
kernel-headers-2.6.18-92.1.10.el5
[root@xyz ~]# ls /boot/
grub  message
[root@xyz ~]#

thanks for your help.

mwalling@you ~$ uname -a
Linux you 2.6.18.8-domU-linode7 #1 SMP Mon Feb 11 13:45:54 EST 2008 i686 Intel(R) Xeon(R) CPU           L5335  @ 2.00GHz GenuineIntel GNU/Linux
mwalling@you ~$ zgrep "NETBIOS" /proc/config.gz
# CONFIG_IP_NF_NETBIOS_NS is not set

That means you are probably going to have to build it as a module using the source from http://linode.com/src/.

The kernels that your Linode runs are provided by Linode, not by your distribution.

here is my configuration

[root@xyz ~]# uname -a
Linux iv6.net 2.6.18.8-linode10 #2 SMP Sat Jul 19 20:24:32 EDT 2008 i686 i686 i386 GNU/Linux
[root@xyz ~]# zgrep "NETBIOS" /proc/config.gz
# CONFIG_IP_NF_NETBIOS_NS is not set
[root@xyz ~]#

yes, our configuration is similar.( 2.6.18.8 ).
mine is linode10, yours is domU-linode7.

how to build a kernel module from http://linode.com/src/
is it equal like build a vanilla kernel?
any URL that explain it?

hehmm ..
a new thing for me.
i think i can upgrade my own operating system (in VPS),
but now i knew that the operating system doesn't like
an ordinary installation of centos.

Unless you need to actually track the connections of netbios sessions (probably only needed if you are doing things with samba and/or CIFS shares) then just configure iptables to not load that module.

Edit /etc/sysconfig/iptables-config and comment out the following line.

Replace:
IPTABLES_MODULES="ip_conntrack_netbios_ns"
With:
#IPTABLES_MODULES="ip_conntrack_netbios_ns"

Yes, it's like building a vanilla kernel, but you don't have to compile the kernel itself, just the module(s).

This is only possible in Xen linodes. There have been at least two recent threads on the subject:
http://www.linode.com/forums/viewtopic.php?t=3478
http://www.linode.com/forums/viewtopic.php?t=3389