Linux Netfilter discussions
 help / color / mirror / Atom feed
From: utteerna <utteerna@gmail.com>
To: Marco Berizzi <pupilla@hotmail.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: Small doubt from a newbie :)
Date: Fri, 10 Nov 2006 14:08:38 +0530	[thread overview]
Message-ID: <45543A8E.7070606@gmail.com> (raw)
In-Reply-To: <BAY103-DAV23E7F7CB054F62AA05D7BB2F00@phx.gbl>

Here's steps i followed and error details. Please let me know if i 
missed something

1)Downloaded linux-2.6.18.2 and put it in /usr/src dir and untarred it
2)Downloaded iptables-1.3.6 and put it in /usr/src dir and untarred it
3)Downloaded patch-o-matic-ng-20061108.tar and put it in /usr/src dir 
and untarred it

4)cd /usr/src/patch-o-matic-ng-20061108
[/usr/src/patch-o-matic-ng-20061108]# export 
KERNEL_DIR=/usr/src/linux-2.6.18.2
[/usr/src/patch-o-matic-ng-20061108]# 
exportIPTABLES_DIR=/usr/src/iptables-1.3.6
[/usr/src/patch-o-matic-ng-20061108]# ./runme extra
Applied the following patches : IPV4OPTSSTRIP, ipv4options,ROUTE 
,TARPIT,sip-conntrack-nat
---QUESTION-->>I didn't find any patch called "random" here. Where to 
get it???

6) cd /usr/src/linux-2.6.18.2
[/usr/src/linux-2.6.18.2]# make clean
[/usr/src/linux-2.6.18.2]#make mrproper
[/usr/src/linux-2.6.18.2]#make xconfig
  Under Networking-->Networking options-->Network packet 
filtering-->Core netfilter configuration-->Netfilter Xtables support, i 
selected ALL the options (including "statistic") and set it compile as  
modules.
---QUESTION-->> Do i have to compile them in to the kernel rather than 
compiling them as modules???
[/usr/src/linux-2.6.18.2]#make bzImage
[/usr/src/linux-2.6.18.2]#make modules
[/usr/src/linux-2.6.18.2]#make modules_install
[/usr/src/linux-2.6.18.2]#make install

7)Now i boot with my new kernel

8) cd /usr/src/iptables-1.3.6
[/usr/src/iptables-1.3.6]# make clean
[/usr/src/iptables-1.3.6]#make
[/usr/src/iptables-1.3.6]#make install

9) Now when i execute
/sbin/depmod -a
/sbin/modprobe ip_tables
/sbin/modprobe ip_conntrack
/sbin/modprobe ip_conntrack_ftp
/sbin/modprobe ip_conntrack_irc
/sbin/modprobe iptable_nat
/sbin/modprobe ip_nat_ftp
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
........some other commands..................
iptables -t mangle -A OUTPUT -o ! eth0 -m random --average 50 -j ACCEPT
........some other commands..................

i get the error
##############################################################################
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.6: Couldn't load match 
`random':/usr/local/lib/iptables/libipt_random.so: cannot open shared 
object file: No such file or directory
##############################################################################
---QUESTION-->> Do i have to load some other modules???
---QUESTION-->>Is the way i do the compiling and installing correct or 
am i missing something???

Thanks
Utteerna

Marco Berizzi wrote:
> utteerna wrote:
>
>
>   
>> I tried the following
>>
>> 1) Took 2.6.18.2 kernel source - Compiled it with "statistic match"
>> option on
>> 2) Then compiled iptables 1.3.6  and installed it
>>
>> But still doesn't work.
>>     
>
> Error messages?
>
>
>
>   


  reply	other threads:[~2006-11-10  8:38 UTC|newest]

Thread overview: 11+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-11-07  8:34 Small doubt from a newbie :) utteerna
2006-11-07  9:25 ` Rob Sterenborg
2006-11-07 11:26   ` utteerna
2006-11-07 12:19     ` Rob Sterenborg
2006-11-07  9:36 ` Marco Berizzi
2006-11-08 11:53   ` utteerna
2006-11-09 10:27     ` Marco Berizzi
2006-11-10  8:38       ` utteerna [this message]
2006-11-10 10:04         ` Marco Berizzi
2006-11-14  4:22           ` utteerna
2006-11-10 18:09         ` Pollywog

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=45543A8E.7070606@gmail.com \
    --to=utteerna@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    --cc=pupilla@hotmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox