Hi all, I'm trying to use iptables with -m time, but I get an error like: iptables v1.3.8: Couldn't load match `time':/usr/lib64/iptables/libipt_time.so: cannot open shared object file: No such file or directory This is true, libipt_time.so does not exist on the system. It is also not provided by any package of iptables I've seen. At least for openSUSE 10.3. Does anyone knows of a version of iptables that provides this ? Thanks for your time, -- Rui Santos http://www.ruisantos.com/ Veni, vidi, Linux! -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Does anyone knows of a version of iptables that provides this ?
You will need to download kernel source, run make oldconfig and select NetFilter modules you want. After that, it's a basic kernel recompile. I suggest not moving to another version of kernel unless you know what are you doing. From 2.6.17 NetFilter naming has changed, from IPT_ to XT_ so it can cause problems with some firewalls expecting IPT_. I'm not aware of any other method of getting more NetFilter modules. -- Best regards, Nick Zeljkovic -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Nick Zeljkovic wrote:
Does anyone knows of a version of iptables that provides this ?
You will need to download kernel source, run make oldconfig and select NetFilter modules you want. After that, it's a basic kernel recompile. I suggest not moving to another version of kernel unless you know what are you doing. From 2.6.17 NetFilter naming has changed, from IPT_ to XT_ so it can cause problems with some firewalls expecting IPT_.
I'm not aware of any other method of getting more NetFilter modules.
Thanks for your reply Nick. The problem is not the kernel module. The kernel is a openSUSE HEAD 2.6.25 kernel that has time match support with xt_time compiled as module. The problem is that the iptables version openSUSE 10.3 ( 1.3.8 ) does not have the libipt_time.so library to be able to take advantage of xt_time. However, with your claim that the proper naming has changed from IPT_ to XT_, I was able to find out that the 1.4.0 version of iptables from lnussel ( BuildService ) includes the libxt_time.so that is supposed to replace the libipt_time.so. openSUSE 11.0 builds of iptables also has libxt_time.so included so, for openSUSE 11.0 users, there is no need for any upgrade. I installed this new version and, all is working as I expected it to. Once again, thanks for you help Nick.
-- Best regards, Nick Zeljkovic
-- Rui Santos http://www.ruisantos.com/ Veni, vidi, Linux! -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Nick Zeljkovic
-
Rui Santos