LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Kernel (https://www.linuxquestions.org/questions/linux-kernel-70/)
-   -   ipt_state module for iptables (https://www.linuxquestions.org/questions/linux-kernel-70/ipt_state-module-for-iptables-722411/)

kwerk 04-29-2009 01:38 AM

ipt_state module for iptables
 
When I try this command I get the unknown error below:

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables: Unknown error 4294967295

I think it is because of the state module. I can't find ipt_state.ko anywhere on the system, only ipt_state.h in the kernel source files. Is there anyway to install this module? There is no mention of it in the .config file.

Here is all the modules I have:

/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ECN.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_LOG.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_REJECT.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_TOS.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_TTL.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ULOG.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_addrtype.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ah.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ecn.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_iprange.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_owner.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_recent.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_tos.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/ipt_ttl.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/iptable_filter.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/iptable_mangle.ko
/lib/modules/2.6.23/kernel/net/ipv4/netfilter/iptable_raw.ko

jomen 04-29-2009 10:56 AM

The modules name is:
xt_state.ko
it is (for me) located at:
/lib/modules/2.6.29-gentoo-r1/kernel/net/netfilter

You may need to load it by hand or in a script that may need it.

You say
Quote:

There is no mention of it in the .config file.
in my .config file the line reads
Code:

CONFIG_NETFILTER_XT_MATCH_STATE=m
and I suppose it would still be there but instead read:
Code:

# CONFIG_NETFILTER_XT_MATCH_STATE= is not set
if it was not selected/not compiled in.

HTH


All times are GMT -5. The time now is 11:27 AM.