如何给iptables添加模块v2.2（含视频教程）

platinum

http://www.netfilter.org/files/changes-iptables-1.3.1.txt

iptables v1.3.1 Changelog
======================================================================
This version requires kernel >;= 2.4.4
This version recommends kernel >;= 2.4.18

Bugs fixed from 1.3.0:

- Fix CLUSTERIP rule deletion
        [ Pablo Neira ]

- Fix libip6t_random compilation
        [ Harald Welte ]

- Fix CONNMARK on 32bit userspace / 64bit kernel archs
        [ Pablo Neira ]

Changes from 1.3.0:

- remove bogus NFC_* stuff in iptables
        [ Pablo Neira ]

- libiptc: don't sort builtin chains, restores iptables-1.2.x sort order
        [ Olaf Rempel ]


Please note: Since version 1.2.7a, patch-o-matic is now no longer part of
iptables but rather distributed as a seperate package
(ftp://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot)

看来那个FAQ里面写的random的IPV6模块的问题，是iptables-1.3.0造成的，现在出了1.3.1，弥补了这个BUG
llzqq遇到的问题也类似，但不是那个模块

大家换用iptables-1.3.1应该会好些

mb

大家弄弄2.6内核吧

hongfengyue

我来作2.6的，完成后告诉大家。
估计明天有空

platinum

kernel 2.6.x HOWTO就交给红桃K了

mb

  期待着

lihn

我全部编译完成后运行：
iptables -A FORWARD -s 192.168.1.0/24 -m ipp2p --edk --bit -j DROP
提示我iptables v1.3.1: Couldn't load match `ipp2p':/usr/local/lib/iptables/libipt_ipp2p.so: cannot open shared object file: No such file or directory
但我把模块安装到了/lib/iptables里面了。模块文件也有啊。

mb

你编译iptables了？
cp到 /usr/local/lib/iptables/ 下

mb

2.6内核上开门不顺呀
make modules SUBDIRS=net/ipv4/netfilter
scripts/Makefile.build:36: kbuild: net/ipv4/netfilter/Makefile - Usage of export-objs is obsolete in 2.6. Please fix!
  Building modules, stage 2.
  MODPOST

lihn

已经cp到 /usr/local/lib/iptables/ 下了。还是不行
而且运行 iptables -L时候提示：
iptables v1.3.1: can't initialize iptables table `filter': Module is wrong version
Perhaps iptables or your kernel needs to be upgraded.

platinum

原帖由 "lihn" 发表：
我全部编译完成后运行：
iptables -A FORWARD -s 192.168.1.0/24 -m ipp2p --edk --bit -j DROP
提示我iptables v1.3.1: Couldn't load match `ipp2p':/usr/local/lib/iptables/libipt_ipp2p.so: cannot open sha..........

iptables的Makefile好像有BUG，虽然指定了LIB=/sbin，但是有时候还会装到/usr/local/lib下
所以我在文档里加了一步ln -s /lib/iptables /usr/local/lib/iptables
你一定没做这步吧？