can i delete the iptable version 1.2.11 and install version 1.2.9?
how to do that???
is it fedora core 2 only can use iptable 1.2.9?
iptable 1.2.11 is not compatible with fedora core 2?


can guide me?

thanks...

you can do that, but is there any reason you would want to downgrade your firewall ?

uninstall the RPM, then either find an onder version in RPM form, or download the iptables source code of that version and use the usuan, configure, amke, make install.

iptables is actually just an interface to the real firewall built into the kernel.
im not sure what you are trying to acumplish.

It is because when i try to run the bandwidth allocation script from
http://l7-filter.sourceforge.net/L7-Netfilter-example
it promt out the message:

iptables v1.2.11: Couldn't load match 'layer7':/usr/local/lib/iptables/libipt_layer7.so:cannot open shared object file:No such file or directory

so my friend said that the iptabels v1.2.11 is only for fedora core 3,
on the other hand, fedora core 2 should use iptabels v1.2.9. ( i am using fedora core 2).

i have tried to uninstall using rpm -e
but there is an error message :

error: Failed dependencies:
iptables >= 1.2.8 is needed by (installed) system-config-securitylevel-tui-1.3.12-1

what error is that?

the package system-config-securitylevel-tui-1.3.12-1 NEEDS a firewall.

but you can ignore this error message as you are going to replace a irewall, you can force an uninstall with "rpm -e --nodeps"

that script SHOULD work with your firewall, minor version number like that are usuallt just bug fixes.. im which case downgrading is not a good idea.

che wan,
this is the list...

[root@jin root]# ls /usr/local/lib/iptables/

libip6t_HL.so libipt_MARK.so libipt_helper.so
libip6t_LOG.so libipt_MASQUERADE.so libipt_icmp.so
libip6t_MARK.so libipt_MIRROR.so libipt_iprange.so
libip6t_TRACE.so libipt_NETMAP.so libipt_length.so
libip6t_eui64.so libipt_NOTRACK.so libipt_limit.so
libip6t_hl.so libipt_REDIRECT.so libipt_mac.so
libip6t_icmpv6.so libipt_REJECT.so libipt_mark.so
libip6t_length.so libipt_SAME.so libipt_multiport.so
libip6t_limit.so libipt_SNAT.so libipt_owner.so
libip6t_mac.so libipt_TARPIT.so libipt_physdev.so
libip6t_mark.so libipt_TCPMSS.so libipt_pkttype.so
libip6t_multiport.so libipt_TOS.so libipt_realm.so
libip6t_owner.so libipt_TRACE.so libipt_rpc.so
libip6t_standard.so libipt_TTL.so libipt_sctp.so
libip6t_tcp.so libipt_ULOG.so libipt_standard.so
libip6t_udp.so libipt_ah.so libipt_state.so
libipt_CLASSIFY.so libipt_connlimit.so libipt_tcp.so
libipt_CONNMARK.so libipt_connmark.so libipt_tcpmss.so
libipt_DNAT.so libipt_conntrack.so libipt_tos.so
libipt_DSCP.so libipt_dscp.so libipt_ttl.so
libipt_ECN.so libipt_ecn.so libipt_udp.so
libipt_LOG.so libipt_esp.so libipt_unclean.so

this is the error i face :

[root@jin iptables-1.2.9]# make KERNEL_DIR=/usr/src/linux-2.6.5-1.358
Extensions found: IPv4:layer7 IPv4:recent IPv6:ah IPv6:esp IPv6:frag IPv6:ipv6header IPv6:hbh IPv6:dst IPv6:rt
cc -O2 -Wall -Wunused -I/usr/src/linux-2.6.5-1.358/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.9\" -fPIC -o extensions/libipt_ah_sh.o -c extensions/libipt_ah.cIn file included from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4.h:8,
from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4/ip_tables.h:25,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_ah.c:8:
/usr/src/linux-2.6.5-1.358/include/linux/config.h:6:2: #error including kernel header in userspace; use the glibc headers instead!
make: *** [extensions/libipt_ah_sh.o] Error 1