Hi experts,
I am running Redhat 7.2 linux, and had installed pmfirewall. it worked fine until fewdays back.

now the ipchains giveing an error saying :

[root@server sbin]# ./ipchains -L
ipchains: Incompatible with this kernel

what happend to the ipchains ?

then I tried with this

[root@server sbin]# ./modprobe ipchains
/lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ipchains.o: init_module: Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters
/lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ipchains.o: insmod /lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ipchains.o failed
/lib/modules/2.4.7-10/kernel/net/ipv4/netfilter/ipchains.o: insmod ipchains failed

what could be happend?
and how do I solve this? if I go for iptables, then which firewall easy to configure? something similer to pmfirewall.

Run:
# lsmod
# uname

and paste the output.

Although im guessing either your kernel does not have ipchains built into it and/or your using iptables.

I found the reason for the error.

Redhat 7.2 loading IPtables as default. not the ipchains. But I need to use the ipchains, cos I have installed the pmfirewall which is using ipchains only.

I can remove the modules by using rmmod for IPtables then enable the ipchains by insmod this is working.

but my question is now how do I make this to stay "permanent". At the moment when i restart the server, it is loading the iptables not IP chains.

I also check the status with chkconfig --list
and changed as
chkconfig --level 123456 iptables off
chkconfig --level 123456 ipchains on

but still no luck.

If you installed it, the easiest way to do this is with "ntsysv" (it should have been installed with RH7.2 - it is by default). Try "man ntsysv" to find out about it.

It will only change the defaults for the current run level, but you're most likely only concerned with run level 3 anyway. It will enable you to change the defaults so that ipchains will run and iptables will not (I know this because I had to do the opposite so that I could use iptables instead of ipchains).