Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Jeff Gordon <jeff.gordon@wellnow.com>
To: netfilter@lists.netfilter.org
Subject: Re: Can I add a module to a prebuilt kernel?
Date: Wed, 2 Jun 2004 15:06:41 -0400	[thread overview]
Message-ID: <20040602190641.GQ18797@wellnow.com> (raw)
In-Reply-To: <40BE09B2.90501@web.de>

On Wed, Jun 02, 2004 at 07:09:06PM +0200, Florian Boelstler wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi,
> 
> Jeff Gordon wrote:
> > I'm running a RH ES 3 system, and it appears _support_ for ipt_recent
> > is included in the kernel but libipt_recent.so is nowhere to be found.
> > Kernel source for the prebuilt kernel in the distribution is available.
> 
> In general, if a kernel feature is built into the kernel there is no
> appropriate module file. Because the functionality is in the kernel.


(Thanks, Florian. :-)  Here's what I'm seeing:

 - If I do 'modprobe ipt_recent' and then 'lsmod |grep ip',
   I see 'ipt_recent' at the top of listing.
 
 - However, if I then add a rule with '-m recent' in it,
   iptables complains it can't find libipt_recent.so.


> > Is there a simple way to build ipt_recent from source and have it
> > function with this kernel, without compiling a kernel from scratch?
> 
> I never tried it, but if you got an appropriate kernel config for your
> running kernel you could start by "make modules && make modules_install"
> (regarding 2.4.x series)
> 
> This only works of course if
> - - you just miss the module file
> - - it is _not_ build into the kernel
> - - and your kernel is prepared to load that feature through a module


I guess I don't know. :-)  The result of 'modprobe' seems to suggest
the kernel understands what I'm saying -- but iptables expects to find
a loadable file that isn't present.  Should I be thinking to leave the
kernel as-is but compile iptables itself from scratch...?  Details:

iptables v1.2.8

/lib/modules/2.4.21-15.ELsmp/kernel/net/ipv4/netfilter/ipt_recent.o

...but no /lib/iptables/libipt_recent.so

> Good luck,

(Thanks. :-)

-- 

 -- Jeff --   <http://www.wellnow.com>

 "There's nothing left in the world to prove.  All that's worth doing
  is to love one another, using whatever means are available to serve."


  parent reply	other threads:[~2004-06-02 19:06 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-06-02  7:38 Can I add a module to a prebuilt kernel? Jeff Gordon
     [not found] ` <40BE09B2.90501@web.de>
2004-06-02 19:06   ` Jeff Gordon [this message]
2004-06-03  7:52     ` Jozsef Kadlecsik
2004-06-03 21:01       ` Jeff Gordon
2004-06-04  7:48         ` Jozsef Kadlecsik
2004-06-03 21:16       ` Best defense for syn-floods...? Jeff Gordon
2004-06-02 21:04 ` Can I add a module to a prebuilt kernel? Martin Stricker
2004-06-02 22:13 ` Florian Boelstler

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20040602190641.GQ18797@wellnow.com \
    --to=jeff.gordon@wellnow.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox