Some more minor changes

include/functions

@@ -132,8 +132,12 @@ function apply_ipv4_hack {
 			# NS-IN-DDOS - Block DNS DDoS using NS/IN spoof, see:
 			# http://www.stupendous.net/archives/2009/01/24/dropping-spurious-nsin-recursive-queries/
 			display_c PURPLE " ./NS/IN-DDOS-FIX"
-			$IPTABLES -A INPUT -j DROP -p udp --dport 53 -m u32 --u32 \
-			"0>>22&0x3C@12>>16=1&&0>>22&0x3C@20>>24=0&&0>>22&0x3C@21=0x00020001"
+			if `$MODPROBE --quiet $MOD_U32 &>/dev/null`; then
+				$IPTABLES -A INPUT -j DROP -p udp --dport 53 -m u32 --u32 \
+				"0>>22&0x3C@12>>16=1&&0>>22&0x3C@20>>24=0&&0>>22&0x3C@21=0x00020001"
+			else
+				display_c RED \nError: could not load $MOD_U32 module into the kernel.  Not using fix."
+			fi
 		;;	
 		esac
 		shift

include/static

@@ -31,4 +31,7 @@ PURPLE="\E[35m"
 AQUA="\E[36m"
 WHITE="\E[1m"
 GREY="\E[37m"
-DEFAULT_COLOR="\E[39m"
+DEFAULT_COLOR="\E[39m"
+
+# Module names that we may need to load
+MOD_U32="xt_u32"

options.default

@@ -6,6 +6,9 @@ IP6TABLES=/bin/true
 #IPTABLES=/sbin/iptables
 #IP6TABLES=/sbin/ip6tables
 
+#This is important for loading kernel modules
+MODPROBE=/sbin/modprobe
+
 # Don't forget to rename this file to 'options'!
 
 # I'm trying to make this config as simple as possible.  Comment out

rc.firewall

@@ -58,6 +58,25 @@ echo "=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  redistribute it under certain conditions.
 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-="
 
+if [ $UID != "0" ]; then
+	display_c RED "You must be root to run this script."
+	exit 2
+fi
+
+if [ ! -x $IPTABLES ]; then
+	display_c RED "iptables command not found.  Please make sure you have the iptables"
+	display_c RED "installed (package or source) and you have the IPTABLES option properly"
+	display_c RED "defined in the 'options' file."
+	exit 3
+fi
+
+
+if [ ! -x $IP6TABLES ] && [ $IPV6 == "1" ]; then
+	display_c RED "ip6tables command not found.  Please make sure you have the iptables"
+	display_c RED "installed (package or source) and you have the IP6TABLES option properly"
+	display_c RED "defined in the 'options' file."
+	exit 3
+fi
 
 iptables_rules_flush ipv4