On Wed, 2 Jun 2004, Jeff Gordon wrote: > > Jeff Gordon wrote: > > > I'm running a RH ES 3 system, and it appears _support_ for ipt_recent > > > is included in the kernel but libipt_recent.so is nowhere to be found. > > > Kernel source for the prebuilt kernel in the distribution is available. > > > > In general, if a kernel feature is built into the kernel there is no > > appropriate module file. Because the functionality is in the kernel. > > - If I do 'modprobe ipt_recent' and then 'lsmod |grep ip', > I see 'ipt_recent' at the top of listing. > > - However, if I then add a rule with '-m recent' in it, > iptables complains it can't find libipt_recent.so. That's the iptables shared library for recent match, which is missing from your systems. In other words the iptables binary lacks the recent match support and thus you cannot use the feature available in the kernel. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary