Re: Iptables fails on -m state --state!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jason Opperisano wrote:

On Fri, Feb 18, 2005 at 09:16:21PM +0000, Marco wrote:


cat /proc/net/ip_tables_matches | grep state doesn't return anything but the contents of ip_tables_matches are:

tcp
udp
icmp



it sounds an awful lot like you compiled your kernel without:

 CONFIG_IP_NF_MATCH_STATE=y

and you would obviously also need:

 CONFIG_IP_NF_CONNTRACK=y

in there as well...

-j

--
"When will I learn? The answer to life's problems aren't at the bottom
of a bottle, they're on TV!"
        --The Simpsons



Of Course I did, as I said in the previous post! But I think I'll try with a different kernel version (maybe the vanilla sources for 2.6.10). Thanks.

Marco Nicoloso



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux