Re: [xtables-addons] xt_ipp2p: add ipv6 module alias

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thank you a lot for your support. Unfortunatelly I`ll be away for next 2 weeks, so I can not cooperate now. After that I`d like to continue.

see you soon
Pep.



---------- Původní e-mail ----------

Od: Jeremy Sowden <jeremy@xxxxxxxxxx>

Komu: kaskada@xxxxxxxx

Datum: 16. 9. 2021 21:13:04

Předmět: Re: [xtables-addons] xt_ipp2p: add ipv6 module alias

On 2021-09-16, at 14:25:00 +0200, kaskada@xxxxxxxx wrote:

> How can I check where iptables/ip6tables searches for plugins/modules

> please?

>

> Actually the problem is not with iptables but with ip6tables. I can

> use IPP2P module on the same Debian with no problems with iptables,

> but ip6tables give this error (still the same):

>

> ip6tables -t mangle -A PREROUTING -m ipp2p --dc -j ACCEPT

> ip6tables v1.8.4 (legacy): Couldn't load match `ipp2p':No such file or

> directory

>

> Try `ip6tables -h' or 'ip6tables --help' for more information.

>

> BTW I`m using legacy (not nf_tables) iptables and ip6tables (changed

> with update-alternatives --config iptables, update-alternatives

> --config ip6tables).



xtables-addons installs the following kernel modules:



  /lib/modules/4.19.0-17-amd64/extra/compat_xtables.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_ACCOUNT.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_CHAOS.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_condition.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_DELUDE.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_DHCPMAC.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_DNETMAP.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_ECHO.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_fuzzy.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_geoip.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_iface.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_IPMARK.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_ipp2p.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_ipv4options.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_length2.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_LOGMARK.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_lscan.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_pknock.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_PROTO.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_psd.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_quota2.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_SYSRQ.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_TARPIT.ko



and the following user-space libraries:



  /usr/lib/x86_64-linux-gnu/xtables/libxt_ACCOUNT.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_CHAOS.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_condition.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_DELUDE.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_dhcpmac.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_DHCPMAC.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_DNETMAP.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_ECHO.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_fuzzy.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_geoip.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_gradm.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_iface.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_IPMARK.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_ipp2p.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_ipv4options.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_length2.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_LOGMARK.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_lscan.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_pknock.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_PROTO.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_psd.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_quota2.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_SYSRQ.so

  /usr/lib/x86_64-linux-gnu/xtables/libxt_TARPIT.so



Make sure you're not using the xt_ipp2p.ko kernel module:



  $ sudo ip6tables-legacy -F -t mangle

  $ sudo iptables-legacy -F -t mangle



Make sure you don't have xt_ipp2p.ko loaded:



  $ sudo modprobe -r xt_ipp2p



Make sure the files don't exists on your box:



  $ sudo rm /lib/modules/4.19.0-17-amd64/extra/xt_ipp2p.ko

  $ sudo rm /usr/lib/x86_64-linux-gnu/xtables/libxt_ipp2p.so



Run depmod:



  $ sudo depmod -av | awk '$1 ~ /xt_ipp2p/'



Make sure you've got the latest source checked out and pristine:



  $ git clean -d -f -x

  $ git reset --hard master

  HEAD is now at f144c2e xt_ipp2p: replace redundant ipp2p_addr

  $ git pull --rebase origin master

  From https://git.inai.de/xtables-addons

   * branch            master     -> FETCH_HEAD

  Already up to date.

  Current branch master is up to date.

  $ git log -1

  commit f144c2ebba17aa4c6b8d402623d53b655945be76 (HEAD -> master, origin/master, origin/HEAD)

  Author: Jan Engelhardt <jengelh@xxxxxxx>

  Date:   Tue Sep 14 17:07:58 2021 +0200



      xt_ipp2p: replace redundant ipp2p_addr



Build and install it:



  $ ./autogen.sh

  $ ./configure

  $ make -j3

  $ sudo make install



Run depmod:



  $ sudo depmod -av | awk '$1 ~ /xt_ipp2p/'

  /lib/modules/4.19.0-17-amd64/extra/xt_ipp2p.ko needs "xt_unregister_matches": /lib/modules/4.19.0-17-amd64/kernel/net/netfilter/x_tables.ko

  /lib/modules/4.19.0-17-amd64/extra/xt_ipp2p.ko needs "HX_memmem": /lib/modules/4.19.0-17-amd64/extra/compat_xtables.ko



Use the extension:



  $ sudo ip6tables-legacy -t mangle -A PREROUTING -m ipp2p --dc -j ACCEPT

  $ sudo ip6tables-legacy -t mangle -L PREROUTING

  Chain PREROUTING (policy ACCEPT)

  target     prot opt source               destination

  ACCEPT     all      anywhere             anywhere             -m ipp2p  --dc



J.





[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux