hello:
I have a problem, when I input order "iptables -A INPUT -p tcp --dport 80 -j ACCEPT", It will point out "iptables: No chain/target/match by that name". So, I look over the source code and found the "setsockopt()" return error, the error is "no such file or directory". I figured it was kernel module setup error, but I do not know which moudule I need.
My board's kernel is 2.6.24, and iptables's version is 1.3.7

thanks everyone.

additional remarks.
The order"iptables -A INPUT -p tcp -j ACCEPT" is OK, and I found When there is "--dport xx" or "--syn" in the order it will point out error.

the kernel you are running, it's compiled by yourself or it's a distro kernel?

compiled by other peoples, and it's not a distro kernel. So, it will lacks some module.

help me！！please

then, you need to compile the modules or compile a new kernel, or install a distro kernel.

getting help on compilling a kernel in a forum seems bad idea to me; and i don't know what distro you are using, nor even if we are talking about a PC or an embedded system.

compile a kernel for debian (which i use daily)it's quite simple, just configure it, something like make menuconfig then make deb-pkg and finally dpkg -i my_shiny_new_kernel.deb; but that can be different on other platforms

you really need to read a lot of documents about compilling a kernel
and if you don't want to compile a kernel, stick with the distro kernel, it is stable enough


best regards

Thank you very much. I am trying to configure new module and insmod to the kernel. compile a new kernel to be applicable my board is too hard for me.

the point is that you need several modules for iptables to work, it isn't just one module...
just try to configure a kernel, make menuconfig, and see all those modules on Networking support --> Networking options --> Network packet filtering (Netfilter)

(i'm just compilling a 3.6.0-rc7 today on my machine)

you say 'board' many times, that makes me think that your are running linux on an embedded system, not a X86/64; i have never build a kernel outside of my computer, so this can not be of help, but trying doesn't hurt:

many times we have a manually compiled kernel, we save a config file in the /boot directory; if you have such a file, you can get the source of your running kernel, place that file as .config, make menuconfig and change all you need to, and compile only the modules, and if you wan't even compile your kernel.

The documentation in the sources is mostly useful.

if i need to compile something, i would prefer to compile a new kernel, downloaded from kernel.org, but i don't know your situation at all


best regards

Thanks for your reply. Yes, I am running linux kernel in an embedded system, It's an ARM chip board, hi3515. sorry I don't know how to describe it well. Thanks again.

as i know about the issue, compilling in an embedded system can be a really annoying task.

¿on which system are you developing? (the desktop you are using to access the embedded board)

if you have a Linux desktop, you can cross-compile the kernel on the desktop an then move it to the board, there are lot's of instruction about it on the official documentation available.
If this is your case, we can explore this way of solving your trouble.
If this is not, and you found a config file on the board's OS, may be you can send it to me and i'll try to compile one kernel for you and give you the steps i have made to do the work (so you can do it by yourself the next time)

i never have cross compiled a kernel, so it will be an interesting experience to me.

best regards

This is my config file. Thanks for you help again.

The lower half.

As cpasqualini has already pointed out, compiling and building a Linux kernel is not very difficult. If you can operate basic command line tools you should be able to compile a kernel. Be sure to save your .config and back it up somewhere safe, then use 'make menuconfig'. Here are some instructions on compiling under debian. Of course you will need to change the specifics according to what package style your using, but the principle is the same: run the config, run make, move the compressed binary to your boot location and cofigure your boot loader to run it.

From your configuration output, it looks like you at least partially compiled netfilter (iptables). Off hand, I am not sure if your missing part of it, or as it looks like you've compiled it as a module you're failing to load it. Personally, netfilter is one of those things that I would compile directly in rather than adding as a module because it is very low level software.

Here are the options needed for IPtables in the kernel (from the Gentoo documentation)