I'm trying to use iptables to mark some packets for later use. The command should be pretty simple: iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 1 When I try to issue the command, I get: iptables v1.4.4: Couldn't load match `MARK':/usr/local/libexec/xtables/libipt_MARK.so: cannot open shared object file: No such file or directory Try `iptables -h' or 'iptables --help' for more information. The MARK and connmark kernel modules are loaded, and I've rebuilt iptables from source a couple of times, but I cannot figure out why it won't build the MARK support module? Any gotchas I should be aware of? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html