iptables module linking issue

iptables module linking issue

[Juha Heljoranta]

Hi,

I had a trouble while trying to get iptables to load my extension. Here
is what I mean:


$ /usr/local/sbin/iptables -A INPUT -m vmexec --vmexec-file \
/usr/bin/wget -j ACCEPT
iptables v1.2.11: Couldn't load match
`vmexec':/usr/local/lib/iptables/libipt_vmexec.so: undefined symbol: stat

Try `iptables -h' or 'iptables --help' for more information.
$ # libc is missing, fix it with -lc
$ ld -shared  -o extensions/libipt_vmexec.so \
extensions/libipt_vmexec_sh.o -lc
$ cp extensions/libipt_vmexec.so \
/usr/local/lib/iptables/libipt_vmexec.so
$ # now it works
$ /usr/local/sbin/iptables -A INPUT -m vmexec --vmexec-file \
/usr/bin/wget -j ACCEPT


I tried to compile iptables with NO_SHARED_LIBS=1 resulting lot of
compile errors.

I also tried to add #include <sys/stat.h> into iptables.c with no effect.

What would be the correct way to get some symbol properly linked into
iptables module?

Regards,
Juha Heljoranta