Re: write a new simple target for netfilter

[Luciano Coelho <luciano.coelho@nokia.com>]

On Mon, 2010-08-30 at 15:25 +0200, ext Nicola Padovano wrote:
> i make an error the iptables line is:
>  iptables -A INPUT -s 127.0.0.1 -p icmp -j TAR
> 
> On Mon, Aug 30, 2010 at 3:22 PM, Nicola Padovano
> <nicola.padovano@gmail.com> wrote:
> > Hi all!
> > I've write the following  (and dummy) module that drops all packet...
> > but...now? after i write the module i can use it?
> > for example: i want digit:
> > iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP
> > but i don't know how create this new target...
> > I've modified the netfilter makefile e Kbuild file (in net/netfilter),
> > and then i've do 'make' 'make modules' 'make modules_install' but
> > after i digit iptables i have this message
> >
> > "iptables v1.4.2: Couldn't load target `TAR':/lib/xtables/libipt_TAR.
> > so: cannot open shared object file: No such file or directory"
> >
> > what's my problem?

You need to add support for your new target in the iptables userspace
tool as well.  Check the source code here:

https://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=summary

You need to add a new extension file called extensions/libipt_TAR.c, the
rest should take care of itself ;)

-- 
Cheers,
Luca.