On Thursday 2011-03-31 14:06, Gilles wrote: >Hello > > I don't have much experience with iptables, and need to use it on an >appliance running uClinux so I can filter packets. > >The appliance provides iptables 1.3.6, and I get this error when >trying to add a rule: >========= >> iptables -A INPUT -p udp -m udp --dport 5060 -m string --string "test" --algo bm -j DROP >iptables v1.3.6: Couldn't find match `string' >========= > >Does someone know if it's a bug in that old release, or is the default >settings wrong to use the "-m string" option (in which case: What >should I change in the Makefile)? Your kernel is either tooooooo old, or was not compiled with the module enabled. iptables 1.3.6 is also obsolete by now. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html