Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Jörg Harmuth" <harmuth@mnemon.de>
To: netfilter@lists.netfilter.org
Subject: Re: layer7 problem
Date: Wed, 24 Aug 2005 16:32:03 +0200	[thread overview]
Message-ID: <430C84E3.2000103@mnemon.de> (raw)
In-Reply-To: <430BC558.8000406@telefonica.net>

Antonio Pérez schrieb:
> Hello,
> I want to use layer7 in my linux box. I have the 2.6.12.5 kerner version
> and the 1.3.3 iptables version. I patched the kernel and the iptables
> with kernel-2.6.11-layer7-1.4.patch, linux-2.6.9-imq1.diff,
> iptables-1.3.0-imq1.diff and iptables-layer7-1.4.patch.
> When i run:
> iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j MARK
> --set-mark 3
> no error show, but when i do:
> iptables -t mangle -L -v
> pkts bytes target     prot opt in     out     source              
> destination
>    0     0 MARK       all  --  any    any     anywhere            
> anywhere            LAYER7 l7proto http MARK set 0x3
> the packets marked always is 0.

So, as we now - only a few posts later - know, that there are no other
rules in the way, we can start looking elsewhere ;)

Hmm, only suggestions available (I have L7 on 2.4.31 and 1.3.2 -
everything is fine). Maybe there is a version mismatch. The kernel patch
is for 2.6.11, whilst you use 2.6.12. Try with kernel 2.6.11 and see if
it works. I will conquer my lazyness and test wether 1.3.3 works with
L7. I'll tell you tomorrow.

Have a nice time,

Joerg


      parent reply	other threads:[~2005-08-24 14:32 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-08-24  0:54 layer7 problem Antonio Pérez
2005-08-24  8:57 ` Jörg Harmuth
2005-08-24  9:30   ` Antonio Pérez
2005-08-24 10:27     ` Jörg Harmuth
2005-08-24 12:07       ` Antonio Pérez
2005-08-24 12:22         ` Jörg Harmuth
2005-08-24 13:59           ` Antonio Pérez
2005-08-24 14:32 ` Jörg Harmuth [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=430C84E3.2000103@mnemon.de \
    --to=harmuth@mnemon.de \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox