From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hari Hendaryanto Subject: Re: xtables-addons searching libipt_*.so instead of libxt_*.so Date: Fri, 26 Feb 2010 08:50:04 +0700 Message-ID: <4B8728CC.20609@csmcom.com> References: <4B871A5C.5010409@csmcom.com> <4B872607.7030305@csmcom.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit To: netfilter-devel@vger.kernel.org Return-path: Received: from outgoing.corp.3g-net.net ([202.127.97.241]:42028 "EHLO outgoing.corp.3g-net.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S934883Ab0BZBuI (ORCPT ); Thu, 25 Feb 2010 20:50:08 -0500 Received: from smtp.corp.3g-net.net (smtp.corp.3g-net.net [202.127.97.230]) by dev.corp.3g-net.net (Postfix) with ESMTP id A2D3023097 for ; Fri, 26 Feb 2010 08:50:01 +0700 (WIT) Received: from [192.168.200.113] (a.ns.kutukupret.org [202.127.98.148]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.corp.3g-net.net (Postfix) with ESMTPSA id 4CA4C24FC6 for ; Fri, 26 Feb 2010 08:50:14 +0700 (WIT) In-Reply-To: <4B872607.7030305@csmcom.com> Sender: netfilter-devel-owner@vger.kernel.org List-ID: Hari Hendaryanto wrote: > Jan Engelhardt wrote: >> On Friday 2010-02-26 01:48, Hari Hendaryanto wrote: >> >>> when i try to load match, i.e geoip match i found this error >>> >>> iptables v1.4.6: Couldn't load match >>> `geoip':/lib64/xtables/libipt_geoip.so: >>> cannot open shared object file: No such file or directory >>> >>> i've check /lib64/xtables and i see libxt_geoip.so is there >>> >>> why iptables search /lib64/xtables/libipt_geoip.so not >>> /lib64/xtables/libxt_geoip.so ? >>> >> >> This is a suboptimal error message generated by iptables. iptables >> tries to load both libxt_ and libipt_/libip6t_, however when all >> failed, it only prints the last filename that was tried. We clearly >> need to improve upon that. >> >> You can try >> >> strace -e open iptables -m geoip -h >> >> and see if it opens libxt_geoip.so at all. >> -- >> To unsubscribe from this list: send the line "unsubscribe >> netfilter-devel" in >> the body of a message to majordomo@vger.kernel.org >> More majordomo info at http://vger.kernel.org/majordomo-info.html >> > thanks for quick response, > > running > > strace -e open iptables -m geoip -h > > result > > open("/etc/ld.so.cache", O_RDONLY) = 3 > open("/lib64/libip4tc.so.0", O_RDONLY) = 3 > open("/lib64/libxtables.so.4", O_RDONLY) = 3 > open("/lib64/libm.so.6", O_RDONLY) = 3 > open("/lib64/libc.so.6", O_RDONLY) = 3 > open("/lib64/libdl.so.2", O_RDONLY) = 3 > open("/lib64/xtables/libxt_geoip.so", O_RDONLY) = -1 EACCES > (Permission denied) > open("/lib64/xtables/libipt_geoip.so", O_RDONLY) = -1 ENOENT (No such > file or directory) > iptables v1.4.6: Couldn't load match > `geoip':/lib64/xtables/libipt_geoip.so: cannot open shared object > file: No such file or directory > > yes, it search for libxt_geoip.so. but open, get permission denied > > ls -al /lib64/xtables/libxt_geoip.so > > -rwxr-xr-x. 1 root root 13505 2010-02-25 04:12 > /lib64/xtables/libxt_geoip.so > arrgh, sorry for the disturbance, i think it's caused by selinux thanks for pointing me to the right direction anyway regards