RE: getting iptables into embedded kernel

["Rob Sterenborg" <rob@sterenborg.info>]

>> How to get iptables into a ppc kernel (2.6, netfilter
>> enabled) and where to store what to have functionality from the
>> start? I used NO_SHARED_LIBS=1
>> I am able to download start the kernel, but do not find iptables.
> 
> AFAIK you cannot.
> Iptables is a *user*space utility to configure the Netfilter framework
> and I don't see how you'd compile that into the kernel.
> 
> 
> Rob
> 
> 
> Ok, I am a little confused with kernel modules. Anyhow I would like to
> do something like this here (from the install):
> "
> 4) If you want to build a statically linked version of the iptables
>    binary, without the need for loading the plugins at runtime (e.g.
>    for an embedded device or router-on-a-disk), please use
> 
> 	% make NO_SHARED_LIBS=1
> "
> 
> and I get a rather large executable binary (700kB). But I
> can't execute this nor do I know how to make it run inside my target.
> Klaus

This is something different from compiling things "into" the kernel.
You've just built a statically linked iptables binary: those binaries
don't need external libraries, which is why they are larger because the
functionality in the libraries must be present in the binary to actually
make it standalone.

So, you still get a binary called iptables which must be run from some
shell (I guess).


Rob