Re: can't use MARK target

[Saikiran Madugula <hummerbliss@gmail.com>]

Steve Brown wrote:
> I'm trying to use iptables to mark some packets for later use.  The
> command should be pretty simple:
> 
> iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 1
> 
> When I try to issue the command, I get:
> 
> iptables v1.4.4: Couldn't load match
> `MARK':/usr/local/libexec/xtables/libipt_MARK.so: cannot open shared
> object file: No such file or directory
> 
> Try `iptables -h' or 'iptables --help' for more information.
> 
> The MARK and connmark kernel modules are loaded, and I've rebuilt
> iptables from source a couple of times, but I cannot figure out why it
> won't build the MARK support module?  Any gotchas I should be aware
> of?
> --
My wild guess something to do with dynamic linking, does adding
/usr/local/libexec/ path to /etc/ld.so.conf help ?