Hello all, Using iptables (nf_tables backend) to harden a s2s ipsec tunnel. Using Banana Pi R2-Pro board, with Rockchip 3568, aarch64, Ubuntu 22.04, 6.1.22-customed kernel iptables -A INPUT -m tcp/udp/conntrack -j ACCEPT These are non-sensical configs for demonstration purposes. I got iptables v1.8.7 (nf_tables): Couldn't load match 'tcp/udp/conntrack':No such file or directory Kernel config CONFIG_NETFILTER_XT_MATCH_SOCKET=y CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y ls /lib/aarch64-linux-gnu/xtables Contains libxt_tcp.so, libxt_udp.so, and libxt_conntrack.so and others env SHELL=/bin/bash XTABLES_LIBDIR=/lib/aarch64-linux-gnu/xtables PWD=/etc LOGNAME=root XDG_SESSION_TYPE=tty SYSTEMD_EXEC_PID=326 MOTD_SHOWN=pam HOME=/root LANG=C.UTF-8 LS_COLORS= [truncated] Did export XTABLES_LIBDIR=/lib/aarch64-linux-gnu/xtables, but to avail. Does iptables look elsewhere for XTABLES_LIBIDR? Thanks. Lucas.
