Error om "-m state" - kernel configuration wrong??

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello.

I've recently upgraded my kernel from 2.6.14 to 2.6.19 and now iptables
doesn't work anymore. I get this error message:

# iptables -A bad_tcp_packets -p tcp --tcp-flags SYN,ACK SYN,ACK -m
state --state NEW -j DROP
iptables v1.3.6: Couldn't find match `state'

I've looked through the kernel configuration, and it seems I have to
activate NETFILTER_XT_MATCH_STATE, which seems to replace
IP_NF_TARGET_CLASSIFY (which no longer exists). However, when I do this,
it still doesn't work.

In fact, nothing I activate under the new "Core Netfilter configuration"
folder in the kernel configuration (like "netfilter netlink" and xtables
support) seems to affect the iptables command.

Does anyone have any ideas? Am I even on the right track?


This email was Anti Virus checked by Astaro Security Gateway.

-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux