IPtables: U32 kernel version compatibility
 

Hi All,
Can anyone tell if the iptables U32 extension is compatible with FC5 linux 2.6.15 version ?

Thanks
Maxx

I see no reason why it shouldn't. U32 is a part of standard kernel tree.

Hi Mara,
Thanks for your reply. I checked in kernel version 2.6.15 (FC5) but could not find the necessary files or the CONFIG_IP_NF_MATCH_U32 in .config or obj-$(CONFIG_IP_NF_MATCH_U32) += ipt_u32.o in Makefile.

Correct me if I am looking at the wrong files.

Regards
Maxx

You need to search for CONFIG_NET_CLS_U32

When I am trying to add this rule, it is giving the following error.

iptables -m u32 --u32 "16=0xE0000001"
iptables v1.3.7: Couldn't load match `u32':/usr/local/lib/iptables/libipt_u32.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.


Actually I am trying to match MAC address from inside a DHCP message with some value and
then want to perform an action based on the result. For that I want to use U32 to do
a deep packet lookup using U32 option.

Any pointers ?

Regards