krn 2.4.30, iptables 1.3.1, last pom and condition extension problem

krn 2.4.30, iptables 1.3.1, last pom and condition extension problem

[Samuel Díaz García]

[-- Attachment #1: Type: text/plain, Size: 900 bytes --]

I had trying to use -m condition iptables extension module, but when I 
see /proc/net I cant see ipt_condition directory and I can't make it.

I try to put in --condition parameter an absolut path, the iptables 
command had no problem running, but seems it allways assume "1" when I 
put "1" or "0" into it.

I use lines as these:

#> echo "0" > /my_conditions/ipp2p_on
#> iptables -A FORWARD -m condition ! --condition 
/my_conditionss/ipp2p_on -m ipp2p --ipp2p -j DROP

And, the idea is, to enable or disable ipp2p software transfers is only 
put "1" or "0" into the condition.

¿Some helps about this problem?

How can I make the /proc/net/ipt_condition directory?

Thanks

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

mailto:samueldg@arcoscom.com
http://www.arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83

Re: krn 2.4.30, iptables 1.3.1, last pom and condition extension problem

[Samuel Díaz García]

[-- Attachment #1: Type: text/plain, Size: 995 bytes --]

¿Any suggestion?

Samuel Díaz García wrote:

> I had trying to use -m condition iptables extension module, but when I 
> see /proc/net I cant see ipt_condition directory and I can't make it.
> 
> I try to put in --condition parameter an absolut path, the iptables 
> command had no problem running, but seems it allways assume "1" when I 
> put "1" or "0" into it.
> 
> I use lines as these:
> 
> #> echo "0" > /my_conditions/ipp2p_on
> #> iptables -A FORWARD -m condition ! --condition 
> /my_conditionss/ipp2p_on -m ipp2p --ipp2p -j DROP
> 
> And, the idea is, to enable or disable ipp2p software transfers is only 
> put "1" or "0" into the condition.
> 
> ¿Some helps about this problem?
> 
> How can I make the /proc/net/ipt_condition directory?
> 
> Thanks
> 

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

mailto:samueldg@arcoscom.com
http://www.arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83

Re: krn 2.4.30, iptables 1.3.1, last pom and condition extension problem

[Jozsef Kadlecsik]

On Wed, 20 Apr 2005, [ISO-8859-15] Samuel Díaz García wrote:

> > I had trying to use -m condition iptables extension module, but when I
> > see /proc/net I cant see ipt_condition directory and I can't make it.
> >
> > How can I make the /proc/net/ipt_condition directory?

modprobe ipt_condition

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

[SOLVED] krn 2.4.30, iptables 1.3.1, last pom and condition extension problem

[Samuel Díaz García]

[-- Attachment #1: Type: text/plain, Size: 1456 bytes --]

Yes, when the "ipt_condition" module is loaded it creates the directory
and the files with "0" into them.

We don't need to manually create the "ipt_condition" directory or the
files (we can't write into /proc, I think).

If we need to add more condition files, only need to add the iptables
rule and then "rmmod ipt_condition" and then iptables will load by
itself the "ipt_condition" module when it was needed.

If you dont see the "ipt_condition" module with "lsmod | grep condition"
command, you will need to run "modprobe ipt_condition" by hand.

Best regards and thanks to all for your help.



Jozsef Kadlecsik wrote:

> On Wed, 20 Apr 2005, [ISO-8859-15] Samuel Díaz García wrote:
> 
> 
>>>I had trying to use -m condition iptables extension module, but when I
>>>see /proc/net I cant see ipt_condition directory and I can't make it.
>>>
>>>How can I make the /proc/net/ipt_condition directory?
> 
> 
> modprobe ipt_condition
> 
> Best regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary
> 
> 
> 

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

mailto:samueldg@arcoscom.com
http://www.arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83