Steve Brown wrote: > I'm trying to use iptables to mark some packets for later use. The > command should be pretty simple: > > iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 1 > > When I try to issue the command, I get: > > iptables v1.4.4: Couldn't load match > `MARK':/usr/local/libexec/xtables/libipt_MARK.so: cannot open shared > object file: No such file or directory > > Try `iptables -h' or 'iptables --help' for more information. > > The MARK and connmark kernel modules are loaded, and I've rebuilt > iptables from source a couple of times, but I cannot figure out why it > won't build the MARK support module? Any gotchas I should be aware > of? > -- My wild guess something to do with dynamic linking, does adding /usr/local/libexec/ path to /etc/ld.so.conf help ? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html