ipt_state module for iptables

kwerk · 04-29-2009, 01:38 AM

When I try this command I get the unknown error below:

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables: Unknown error 4294967295

I think it is because of the state module. I can't find ipt_state.ko anywhere on the system, only ipt_state.h in the kernel source files. Is there anyway to install this module? There is no mention of it in the .config file.

Here is all the modules I have:

/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ECN.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_LOG.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_REJECT.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_TOS.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_TTL.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ULOG.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_addrtype.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ah.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ecn.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_iprange.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_owner.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_recent.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_tos.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ttl.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/iptable_filter.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/iptable_mangle.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/iptable_raw.ko

jomen · 04-29-2009, 10:56 AM

The modules name is:
xt_state.ko
it is (for me) located at:
/lib/modules/2.6.29-gentoo-r1/kernel/net/netfilter

You may need to load it by hand or in a script that may need it.

You say

Quote:

There is no mention of it in the .config file.

in my .config file the line reads

Code:

CONFIG_NETFILTER_XT_MATCH_STATE=m

and I suppose it would still be there but instead read:

Code:

# CONFIG_NETFILTER_XT_MATCH_STATE= is not set

if it was not selected/not compiled in.

HTH