On Tuesday 2009-03-17 11:37, Vlad wrote: >>>> >>>>> Hallo , I'm trying to write a new module for iptables. I started with a >>>>> dummy >>>>> module. I can successfully compile it. But if I trying to use it, I get an >>>>> error message: >>>>> >>>>> $ iptables -A INPUT -s 128.0.0.1 -m secan --drop -j DROP >>>>> drop frame >>>>> iptables: No chain/target/match by that name >>>>> >>>>> Can someone tell me what is a problem? Here is my code: >>>>> [...] >>>>> >>>> The iptables code looks fine, but what about the kernel side module? >>>> >>> All other iptables modules work fine. I'm pretty new to iptables, can you >>> please tell me what kernel side module do you mean? >>> >> Well, xt_secan.c that you (hopefully) wrote that does implement the actual >> packet inspection. >> >> > I saved my module as libipt_secan.c in derictory iptables/extensions. Where > should be xt_secan.c saved? [ Do not strip CCs! ] Ehrm, whereever it is convenient. Since you seem to be not familiar with the matter, I suggest having a read in the “Writing Netfilter modules” e-book, available on http://jengelh.medozas.de/ . -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html