[SOLVED] ipset and iptables

Habitual · 02-18-2014, 01:48 PM

Well, I'm trying to do as instructed and use ipset on my host, trouble is when I go to this

Code:

iptables -I INPUT -m set -match-set autoban src -p TCP -destination-port 80 -j DROP

I get this message: iptables v1.3.5: Couldn't load match `set':/lib64/iptables/libipt_set.so: cannot open shared object file: No such file or directory which http://elrepo.org/bugs/view.php?id=83 says I need iptables 1.4.4 (or above).

So, how does one update iptables 1.3.5 to 1.4.4 exactly on CentOS 5.10 x86_64?
I shouldn't think I'd have to remove iptables (list looks fugly when I tested that option)
I'm kind of stuck and I don't want to break my system by hax0ring around trying to force this issue.

I have these installed:

Code:

iptables-1.3.5-9.2.el5_8
iptables-ipv6-1.3.5-9.2.el5_8
ipset-4.5-1.el5
kmod-ipset-xen-4.5-1.el5

2.6.18-194.32.1.el5xen kernel on a CentOS release 5.10 (Final) / x86_64

ipset* RPMs I got from http://centos.alt.ru/pub/repository/centos/5/x86_64/

Sure looks like I "maybe" could install http://fr2.rpmfind.net//linux/RPM/ce...l6.x86_64.html and it definitely has the libipt_set.so component.

Can someone offer some assistance on what I need to do to get iptables up to version >= 1.4.4?

Thanks.

unSpawn · 02-18-2014, 05:33 PM

There is a CentOS bug tracker ticket about exactly this thing and IIRC ksingh, jhughes or one of the other devs involved concluded they wouldn't be providing support for it through CentOS (extras?). Personally I wouldn't use the .alt.ru binary packages but take the source RPMs, scrutinize the .spec files and rebuild myself. After all that's what you will have to do from then on for each and every 5.x kernel release so you'd better get familiar with it and do QA yourself...

Habitual · 02-19-2014, 08:12 AM

Noted.
Thanks!