Description of problem: I'm trying use the iptable's ipt_string module, but thereis a problem: The kernel module ipt_string.ko existis into kernel. But the /lib/iptables/libipt_string.so does not exists. Version-Release number of selected component (if applicable): FC4 kernel-2.6.14-1.1653_FC4 iptables-1.3.0-2 How reproducible: Try use a iptables strind module for example: iptables -A INPUT -p tcp -m string --string -j LOG --log-prefix "FW:INPUT [.exe] " Steps to Reproduce: 1. 2. 3. Actual results: iptables v1.3.0: Couldn't load match `string':/lib/iptables/libipt_string.so: cannot open shared object file: No such file or directory Expected results: Additional info:
Same problem on FC5 with all packages updated: [root@joselilaviola ~]# iptables -m string --help iptables v1.3.5: Couldn't load match `string':/lib/iptables/libipt_string.so: cannot open shared object file: No such file or directory Try `iptables -h' or 'iptables --help' for more information. [root@joselilaviola ~]# ls /lib/iptables/*string* ls: /lib/iptables/*string*: No such file or directory [root@joselilaviola ~]# rpm -qa |grep kernel kernel-smp-2.6.17-1.2145_FC5 [root@joselilaviola ~]# rpm -qa |grep iptables iptables-1.3.5-1.2 [root@joselilaviola ~]# The string module is disabled in the Makefile on the extensions directory, probably because the compilation fails because of the absence of libipt_string.h from the includes directory. This file is missing on the upstream tarball as well.
The header ipt_string.h has to be added for this. Assigning to glibc-kernheaders for now. If it is fixed there, please reassign to iptables. A rebuild of the package will do it then.
This report targets the FC3 or FC4 products, which have now been EOL'd. Could you please check that it still applies to a current Fedora release, and either update the target product or close it ? Thanks.
Just checked in FC6 (fully updated) and the string module exists and is working fine according to my tests. If the OP agrees, I believe this could be closed.
Fixed in Fedora 7 (and FC6 according to comment 4)