Hello Raymond, Thanks for your help. Modules are not missing and they are compiled also. But one doubt , in ip_conntarck_in function of ip_conntrack_core.c file. When it lokks for ct-helper, it's address is 0, means that helper are not register. But I've compiled h323& rtc helper, as I'm very new to iptables/netfilter, I don't have any idea what does this means ? Regards Upma Raymond Leach wrote: > Sounds like it doesn't understand the -j FTOS. Maybe a missing module or > not compiled into the kernel? > > On Thu, 2003-01-09 at 10:13, Upma Gandhi wrote: > > Hello All, > > I have a following setup > > > > Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24) > > > > lets supopose eth0 is LAN side Interface and > > eth1 is WAN side interface. > > > > what I want to do is "Mark all h323 packets with some tos value". > > for which my iptables command seems to be like this- > > iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m > > rtp -j FTOS --set-ftos 0xb8. > > > > but it's giving an error message - > > iptable: No chain/target/match by tha rule. > > > > Can anybody help me out. > > > > Thanks & Regards > > Upma > > > -- > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > ( Raymond Leach ) > ) Knowledge Factory ( > ( ) > ) Tel: +27 11 445 8100 ( > ( Fax: +27 11 445 8101 ) > ) ( > ( http://www.knowledgefactory.co.za/ ) > ) http://www.saptg.co.za/ ( > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > o o > o o > .--. .--. > | o_o| |o_o | > | \_:| |:_/ | > / / \\ // \ \ > ( | |) (| | ) > /`\_ _/'\ /'\_ _/`\ > \___)=(___/ \___)=(___/ > > ------------------------------------------------------------------------ > Name: signature.asc > signature.asc Type: application/pgp-signature > Description: This is a digitally signed message part