Fw: Problem with CONNMARK

Fw: Problem with CONNMARK

[Tomek Macioszek]

Hi!
I have problems with use target CONNMARK. When I type command :
iptables -j CONNMARK -h
output gives me  information that iptables is compiled with this options, 
but when I use command like this i.e.:
iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
system couldn't do this. It write to me :
iptables: No chain/target/match by that name

My system: FEDORA 2
KERNEL: 2.6.5 ( compiled with target CONNMARK)
IPTABLET: v 1.2.9.
What is wrong wiht it??
Sorry for my English
Best regards
Tomek 

Re: Fw: Problem with CONNMARK

[George Alexandru Dragoi]

You need to get the latest iptables source and recompile it against
the kernel source you are running.


On Fri, 29 Oct 2004 07:37:07 +0200, Tomek Macioszek <tomekm@cea.pl> wrote:
> Hi!
> I have problems with use target CONNMARK. When I type command :
> iptables -j CONNMARK -h
> output gives me  information that iptables is compiled with this options,
> but when I use command like this i.e.:
> iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
> system couldn't do this. It write to me :
> iptables: No chain/target/match by that name
> 
> My system: FEDORA 2
> KERNEL: 2.6.5 ( compiled with target CONNMARK)
> IPTABLET: v 1.2.9.
> What is wrong wiht it??
> Sorry for my English
> Best regards
> Tomek
> 
> 


-- 
Bla bla

Re: Fw: Problem with CONNMARK

[Jason Opperisano]

On Fri, 2004-10-29 at 01:37, Tomek Macioszek wrote:
> Hi!
> I have problems with use target CONNMARK. When I type command :
> iptables -j CONNMARK -h
> output gives me  information that iptables is compiled with this options, 
> but when I use command like this i.e.:
> iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
> system couldn't do this. It write to me :
> iptables: No chain/target/match by that name
> 
> My system: FEDORA 2
> KERNEL: 2.6.5 ( compiled with target CONNMARK)
> IPTABLET: v 1.2.9.
> What is wrong wiht it??
> Sorry for my English
> Best regards
> Tomek 

it means the "iptables" command (/sbin/iptables) on FC2 has been
compiled with awareness of the CONNMARK target, but your kernel does not
have support for it
(ls /lib/modules/`uname -r`/kernel/net/ipv4/netfilter/ipt_CONNMARK.ko)

you need to grab patch-o-matic from:
http://netfilter.org/files/patch-o-matic-ng-20040621.tar.bz2

and follow the instructions.  a summary:

        cd /path/to/pom
        export KERNEL_DIR="/path/to/kernel_src"
        export IPTABLES_DIR="/path/to/iptables_src"
        ./runme pending
        ./runme extra/CONNMARK
        cd $KERNEL_DIR && make menuconfig [...]
        cd $IPTABLES_DIR && make && make install

-j

-- 
Jason Opperisano <opie@817west.com>

Re: Fw: Problem with CONNMARK

[Jason Opperisano]

On Fri, 2004-10-29 at 08:54, Jason Opperisano wrote:
>         cd $IPTABLES_DIR && make && make install

heh--left out the part where you grab the iptables source as well:

http://netfilter.org/files/iptables-1.2.11.tar.bz2

-j

-- 
Jason Opperisano <opie@817west.com>