netdev - Re: tc ipt action bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Sun, 04 Jan 2009 09:48:27 -0500
From:	jamal <hadi@...erus.ca>
To:	Yawhen Kasarzhewski <yevg@...em.net>
Cc:	netdev@...r.kernel.org
Subject: Re: tc ipt action bug

Upgrade to latest iproute2 - probably from git tree which should fix
this in the following commit:
-----

commit 53c017880b311d7d68926109d4248c900286f6b7
Author: Denys Fedoryshchenko <nuclearcat@...learcat.com>
Date:   Mon Dec 24 11:51:11 2007 -0500

    iptables compatiablity
    
    New iptables 1.4.0 has some library names changed from libipt to
libxt.
    It is prefferable also to open libxt_ first, as newer "style".
    
    Signed-off-by: Denys Fedoryshchenko <nuclearcat@...learcat.com>
    Signed-off-by: Jamal Hadi Salim <hadi@...erus.ca>
    Signed-off-by: Stephen Hemminger <stephen.hemminger@...tta.com>
-------

cheers,
jamal

On Sat, 2009-01-03 at 22:29 +0200, Yawhen Kasarzhewski wrote:
> iproute is still using old iptables so failing to work with new xt_tables:
> 
> warp:~# tc filter add dev ppp0 parent ffff: protocol ip prio 10 u32 \
>  >   match u32 0 0 flowid 1:1 \
>  >   action ipt -j MARK --set-mark 1 \
>  >   action mirred egress redirect dev ifb0
> /lib/iptables/libipt_mark.so: cannot open shared object file: No such 
> file or directory
> failed to find target MARK
> warp:~# find /lib -name "*mark.so"
> /lib/ebtables/libebt_mark.so
> /lib/xtables/libxt_connmark.so
> /lib/xtables/libxt_mark.so
> warp:~# iptables -V
> iptables v1.4.1.1
> warp:~# tc -V
> tc utility, iproute2-ss080725
> warp:~# uname -a
> Linux warp 2.6.26 #2 Sun Jul 27 21:06:55 EEST 2008 i686 GNU/Linux
> 
> --
> To unsubscribe from this list: send the line "unsubscribe netdev" in
> the body of a message to majordomo@...r.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html