iptables not finding stealth match

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

iptables not finding stealth match

Postby Ribs » Thu Jul 22, 2004 8:46 pm

Hi,

I (somehow) managed to break iptables' ability to see my stealth patch on the kernel. When I run anything including the stealth support that grsecurity offers, I get this error:

riblet linux # iptables -A INPUT -p tcp -m stealth -j DROP
iptables v1.2.9: Couldn't load match `stealth':/lib/iptables/libipt_stealth.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

It seems to me that iptables is trying to load a module here, which is wrong, as it's compiled into my 2.6.7 kernel; there is no module to load. I've tried recompiling iptables to no avail.

Any ideas?

-Ribs.
Ribs
 
Posts: 8
Joined: Wed Jan 07, 2004 5:21 pm

Postby spender » Thu Jul 22, 2004 10:15 pm

You also need to recompile your iptables with the iptables patch on the website.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support

cron