Attachment 159746 Details for Bug 191331 – Identify 'missing' iptables modules.

Identify 'missing' iptables modules.

ipt_kmodules.sh (text/plain), 1.38 KB, created by DaveG on 2007-07-22 15:46:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: DaveG

Created: 2007-07-22 15:46:29 UTC

Size: 1.38 KB

patch

obsolete

>#!/bin/bash
>#
># ipt_kmodules.sh
>#
># Identify the iptables library module for each kernel netfilter module
># and check the file exists.
>#
># Missing modules imply:
># The kernel can handle the netfilter option but iptables cannot set them up or 
># read them. This could trigger errors from iptables -L or iptables-save.
>#
># Requires kernel, iptables, iptables-ipv6
>#
># Hacked together by: David Greenhouse <daveg at dgit dot ndo dot co dot uk>
># 2007-07-21
>
>kver=`uname -r`
>modules=""
>
>echo "The following kernel netfilter modules have no corresponding iptables library module:"
># IPv4
>for f in /lib/modules/${kver}/kernel/net/ipv4/netfilter/ipt_*.ko; do
>	kmod=`basename $f .ko`
>	modules+="${kmod} "
>done
>
># IPv6
>for f in /lib/modules/${kver}/kernel/net/ipv6/netfilter/ip6t_*.ko; do
>	kmod=`basename $f .ko`
>	modules+="${kmod} "
>done
>
># IPvX
>for f in /lib/modules/${kver}/kernel/net/netfilter/xt_*.ko; do
>	kmod=`basename $f .ko`
>	aliases=`awk -v kmod=${kmod} '$3==kmod && ( $2 ~ /ipt_/ || $2 ~ /ip6t_/ ) {print $2}' /lib/modules/${kver}/modules.alias`
>	if [ -n "${aliases}" ]; then
>		for alias in ${aliases}; do
>			modules+="${alias} "
>		done
>	else
>		echo "No aliases for ${kmod}"
>	fi
>done
>
># sort -u and check for corresponding iptables library module
>for mod in `echo ${modules} | tr ' ' '\n' | sort -u`; do
>	libipt="/lib/iptables/lib${mod}.so"
>	if [ ! -e ${libipt} ]; then
>		echo "Missing: ${libipt}"
>	fi
>done
>

Actions: View

Attachments on bug 191331: 139054 | 159745 | 159746 | 159747