RE: Missing shared object

RE: Missing shared object

[Brian Atkins]

Thanks for the suggestions, but I've already done a through search for 
the object (libipt_ipv4options.so) and I've also recompiled the kernel 
with all the netfilter options and re-emerged iptables, with no change 
for the better.

-- 
Brian

Missing shared object

[Brian Atkins]

Good morning.

I have a Gentoo server (2.6.16-r7 kernel from Gentoo sources) running 
iptables 1.3.4. This is a fresh build and I am setting up rules for the 
first time. The rules were complied using FWBuilder and are the same set 
of rules on my current firewall, which is running the same 
configuration, hardware, etc.

The first attempt to run the FWB generated script failed:

iptables-restore v1.3.4: Couldn't load match 
`ipv4options':/lib/iptables/libipt_ipv4options.so: cannot open shared 
object file: No such file or directory
Error occurred at line: 152
Try `iptables-restore -h' or 'iptables-restore --help' for more information.

The offending line is:

-A Cid4461182F.0 -p all  -m ipv4options  --rr  -j ACCEPT

I dug through the Netfilter docs and Googled the errors, but only turned 
up a single site that seems to be relevant (anyone know polish?). 
However, everything seems to indicate that this was an issue with 
version 1.2.8, which was corrected by a patch.

Anyone have more recent experience with this issue?

Thanks,

-- 
Brian

"An adventure is never an adventure
when it's happening.  Challenging
experiences need time to ferment,
and an adventure is simply physical
and emotional discomfort recollected
in tranquility." -- Tim Cahill

RE: Missing shared object

[Rob Sterenborg]

> Good morning.
> 
> I have a Gentoo server (2.6.16-r7 kernel from Gentoo sources) running
> iptables 1.3.4. This is a fresh build and I am setting up rules for
> the first time. The rules were complied using FWBuilder and are
> the same set of rules on my current firewall, which is running the
> same configuration, hardware, etc. 
> 
> The first attempt to run the FWB generated script failed:
> 
> iptables-restore v1.3.4: Couldn't load match
> `ipv4options':/lib/iptables/libipt_ipv4options.so: cannot open shared
> object file: No such file or directory
> Error occurred at line: 152
> Try `iptables-restore -h' or 'iptables-restore --help' for more
> information.
> 
> The offending line is:
> 
> -A Cid4461182F.0 -p all  -m ipv4options  --rr  -j ACCEPT
> 
> I dug through the Netfilter docs and Googled the errors, but
> only turned up a single site that seems to be relevant (anyone know
> polish?).
> However, everything seems to indicate that this was an issue with
> version 1.2.8, which was corrected by a patch.

The error says:

===========
iptables-restore v1.3.4: Couldn't load match
`ipv4options':/lib/iptables/libipt_ipv4options.so: cannot open shared
object file: No such file or directory
===========

So, it looks like you don't have the file "libipt_ipv4options.so", or
perhaps it's in the wrong place. Try to find the file ("locate
libipt_ipv4options.so") to see if and where it finds it.
If you don't have it, you're going to have to patch the kernel for
ipv4options and build a new one to be able to use ipv4options.


Gr,
Rob

Re: Missing shared object

[Pascal Hambourg]

Hello,

Rob Sterenborg a écrit :
> 
> So, it looks like you don't have the file "libipt_ipv4options.so", or
> perhaps it's in the wrong place. Try to find the file ("locate
> libipt_ipv4options.so") to see if and where it finds it.
> If you don't have it, you're going to have to patch the kernel for
> ipv4options and build a new one to be able to use ipv4options.

Why ? libipt_ipv4options.so is an iptables library, not a kernel module.

RE: Missing shared object

[Rob Sterenborg]

> Hello,
> 
> Rob Sterenborg a écrit :
>> 
>> So, it looks like you don't have the file "libipt_ipv4options.so", or
>> perhaps it's in the wrong place. Try to find the file ("locate
>> libipt_ipv4options.so") to see if and where it finds it.
>> If you don't have it, you're going to have to patch the kernel for
>> ipv4options and build a new one to be able to use ipv4options.
> 
> Why ? libipt_ipv4options.so is an iptables library, not a
> kernel module.

Okay.. Wrong there, sorry about that.
Anyway, he doesn't seem to have the file so the OP has to recompile
iptables, patched for ipv4options because that's in POM-base.


Gr,
Rob