LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices

Reply
 
LinkBack Search this Thread
Old 01-17-2006, 01:07 PM   #1
bbeers
Member
 
Registered: Jul 2002
Location: Florida
Distribution: Centos, Slackware
Posts: 260

Rep: Reputation: 30
iptables missing libipt_connbytes.so?


So, I'm trying to use iptables on my Slackware 10.2 with
a 2.6.15-rc5 kernel with practically all the iptables modules
built as modules.

Why do I get this output?
code:
Code:
root@alakazam:~# iptables -m connbytes -h
iptables v1.3.3: Couldn't load match
 `connbytes':/usr/lib/iptables/libipt_connbytes.so: 
 cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
root@alakazam:~#
Well, I know why I get that output. Why is there no
/usr/lib/iptables/libipt_connbytes.so?

Is iptables package in need of update to work with 2.6.X kernels'
available modules?
I have iptables-1.3.3-i486-1, which is latest from
<http://slackware.it/en/pb/search.php?v=current&t=2&q=libipt_*>.

TIA,

-bbeers
 
Old 01-22-2006, 05:14 PM   #2
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
i would do these things if i were you...

- download the latest kernel source code (2.6.15.1 at the time of this post)...

- double-check that all the netfilter options are properly set and stuff...

- recompile kernel...

- recompile iptables using the latest source code (1.3.4 at the time of this post)...


but having said that, i'm using iptables 1.3.4 and kernel 2.4.33-pre1 and i get the same result as you do, so i doubt it's a 2.6 issue:
Code:
bash-3.00# iptables -m connbytes 
iptables v1.3.4: Couldn't load match `connbytes':/usr/lib/iptables/libipt_connbytes.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
bash-3.00# find / -name libipt_connbytes.so
bash-3.00# uname -r
2.4.33-pre1
as you can see, there's no file named libipt_connbytes.so on my box... so i'd assume it's due to an option that was missed during the kernel configuration before the build, but i'm not sure what the connbytes module does, though... could it be that the module's name is misspelled or something like that?? or perhaps it's a module that has been removed from netfilter?? when was the last time you got it to actually work??

Last edited by win32sux; 01-22-2006 at 06:48 PM.
 
Old 01-22-2006, 05:25 PM   #3
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
i've found a patch named connbytes in the patch-o-matic repository, so i'm thinking maybe you need to patch before you get the connbytes option??

http://netfilter.org/projects/patch-...xtra-connbytes
 
Old 01-22-2006, 06:57 PM   #4
bbeers
Member
 
Registered: Jul 2002
Location: Florida
Distribution: Centos, Slackware
Posts: 260

Original Poster
Rep: Reputation: 30
Thanks for confirming my issue.

I think the libipt_* files are built from the iptables
source not kernel source. I can modprobe ipt_connbytes
kernel module, it is the library that is missing.

I guess what I'd like to see is the latest iptables package
from slackware include support for *all* the iptables kernel
modules available in the recent vanilla kernels.

I could compile iptables libraries myself, sure, but doesn't
this seem like an oversight wrt the iptables package?

How would one go about making this kind of request? An e-mail
to PJV, himself? Does he read ths forum? Slackware.com still
lists this as "our favorite Slackware questions forum".

--
-bbeers
 
Old 01-22-2006, 07:21 PM   #5
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Quote:
Originally Posted by bbeers
Thanks for confirming my issue.
you're very welcome...

Quote:
I think the libipt_* files are built from the iptables
source not kernel source. I can modprobe ipt_connbytes
kernel module, it is the library that is missing.
hmmm, i see... well, i can't modprobe ipt_connbytes on my 2.4 box, so i guess it's different on 2.6... i don't have any experience with 2.6, though...

Quote:
I guess what I'd like to see is the latest iptables package
from slackware include support for *all* the iptables kernel
modules available in the recent vanilla kernels.
but wouldn't that affect 2.4 compatibility?? i mean, keeping in mind that while slackware has both 2.4 and 2.6 it needs to keep a delicate balance and stuff... of course when slackware goes completely 2.6 then things will be different...

Quote:
I could compile iptables libraries myself, sure, but doesn't
this seem like an oversight wrt the iptables package?
i'm not sure it's an oversight... but if you know what you need to do in order to get these features when compiling iptables then it's just a matter of editing the build script for iptables on slackware 10.2... you could then post your changes to this thread so that it could help other people who have the same issue as you... i tried looking to see which options one would enable at compile time for iptables but couldn't really find anything relevant... perhaps it's just a matter of rebuilding iptables while running the 2.6 kernel??

Quote:
How would one go about making this kind of request? An e-mail
to PJV, himself? Does he read ths forum? Slackware.com still
lists this as "our favorite Slackware questions forum".
yes, this kinda thing is usually dealt with by sending him an email, but only after having tested and considered everything about the issue very thoroughly, of course...

Last edited by win32sux; 01-22-2006 at 07:22 PM.
 
Old 01-23-2006, 12:54 PM   #6
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
how'd it go with this, bbeers?? did you get it working?? i'm starting to think that if you already have the connbytes functionality in your kernel/modules then it's just a matter of recompiling iptables while running that kernel, cuz i couldn't find anything in the iptables installation that would enable such a thing, but i'm not sure of course... have you tried it?? make sure you try compiling iptables 1.3.4 cuz in the changelog they do mention an issue with connbytes and linux 2.6 which was fixed:
Quote:
Fix compilation of connbytes match with 2.6.14 kernel
http://www.netfilter.org/projects/ip...bles-1.3.4.txt
 
Old 01-25-2006, 03:42 PM   #7
bbeers
Member
 
Registered: Jul 2002
Location: Florida
Distribution: Centos, Slackware
Posts: 260

Original Poster
Rep: Reputation: 30
Quote:
Originally Posted by win32sux
how'd it go with this, bbeers?? did you get it working?? i'm starting to think that if you already have the connbytes functionality in your kernel/modules then it's just a matter of recompiling iptables while running that kernel, cuz i couldn't find anything in the iptables installation that would enable such a thing, but i'm not sure of course... have you tried it?? make sure you try compiling iptables 1.3.4 cuz in the changelog they do mention an issue with connbytes and linux 2.6 which was fixed: http://www.netfilter.org/projects/ip...bles-1.3.4.txt
I haven't had the time to chase it down any further yet -- been
very busy at work.

I did notice that iptables project has a lot of non-vanilla stuff
-- which I guess will not be in a slackware iptables package
since the kernel is built vanilla.

I just looked at the kernel itptables modules available in the
'testing/packages/linux-2.6.14.6/kernel-modules-2.6.14.6-i486-1'
and connbytes is not there. So I guess I added it when I compiled
my own kernel 2.6.15-rc5. But, still, I think more iptables
modules could be built with vanilla 2.6.X kernel, and so iptables
needs to be built with all corresponding libs.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables v1.2.9: Unknown arg `/sbin/iptables' Try `iptables -h' or 'iptables --help' Niceman2005 Linux - Security 4 12-29-2005 08:20 PM
iptables how to block p2p (missing ipp2p) Neze Linux - Networking 1 02-01-2005 01:33 PM
Fedora Core Test 2; iptables; recent module; missing libipt_recent.so GMcFall Red Hat 3 10-20-2003 03:59 PM
IPtables Log Analyzer from http://www.gege.org/iptables/ brainlego Linux - Software 0 08-11-2003 06:08 AM
My iptables script is /etc/sysconfig/iptables. How do i make this baby execute on boo ForumKid Linux - General 3 01-22-2002 07:36 AM


All times are GMT -5. The time now is 06:26 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration