Messages in this thread | | | Date | Tue, 28 Mar 2006 10:09:26 +0200 | From | Harald Welte <> | Subject | Re: failed to configure iptables with 2.6.16 kernel |
| |
On Tue, Mar 28, 2006 at 04:00:33AM +0000, Hubert Tonneau wrote: > When upgrading from 2.6.15 to 2.6.16 I noticed iptables not working anymore. > > I traced the problem down to a new 'CONFIG_NETFILTER_XTABLES' compile option > that must be set, but I still get some rules rejected as soon as > '--destination-port' option is used. > > As an example, the following command: > iptables -A eth0in -p udp --destination-port 111 -j DROP
this sounds like you're missing support for the tcp/udp match. This functionality is implemented in xt_tcpudp.{c,ko}, which is compiled as soon as x_tables is compiled.
What does cat /proc/netip_tables_matches show before and after executing your iptables command, and before/after manually executing modprobe xt_tcpudp.
Also, what is your iptables program version?
Please follow-up-to netfilter@lists.netfilter.org, but keep me in Cc
-- - Harald Welte <laforge@netfilter.org> http://netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie [unhandled content-type:application/pgp-signature] | |