can't use MARK target

can't use MARK target

[Steve Brown]

I'm trying to use iptables to mark some packets for later use.  The
command should be pretty simple:

iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 1

When I try to issue the command, I get:

iptables v1.4.4: Couldn't load match
`MARK':/usr/local/libexec/xtables/libipt_MARK.so: cannot open shared
object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

The MARK and connmark kernel modules are loaded, and I've rebuilt
iptables from source a couple of times, but I cannot figure out why it
won't build the MARK support module?  Any gotchas I should be aware
of?

Re: can't use MARK target

[Saikiran Madugula]

Steve Brown wrote:
> I'm trying to use iptables to mark some packets for later use.  The
> command should be pretty simple:
> 
> iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 1
> 
> When I try to issue the command, I get:
> 
> iptables v1.4.4: Couldn't load match
> `MARK':/usr/local/libexec/xtables/libipt_MARK.so: cannot open shared
> object file: No such file or directory
> 
> Try `iptables -h' or 'iptables --help' for more information.
> 
> The MARK and connmark kernel modules are loaded, and I've rebuilt
> iptables from source a couple of times, but I cannot figure out why it
> won't build the MARK support module?  Any gotchas I should be aware
> of?
> --
My wild guess something to do with dynamic linking, does adding
/usr/local/libexec/ path to /etc/ld.so.conf help ?

Re: can't use MARK target

[Steve Brown]

> My wild guess something to do with dynamic linking, does adding
> /usr/local/libexec/ path to /etc/ld.so.conf help ?

Doh!  Of course.... forgot about ld.so.conf.

Thanks!