View previous topic :: View next topic |
Author |
Message |
Paczesiowa Guru
Joined: 06 Mar 2006 Posts: 593 Location: Oborniki Śląskie, Poland
|
Posted: Tue Nov 07, 2006 7:52 pm Post subject: [SOLVED]Couldn't load match `ipp2p' |
|
|
hi
I got a problem with ipp2p. it was working fine for a few months and one day it just stopped working after reboot (I couldn't remember if I did smth wrong, perhaps I emerged wrong thing during updating world but it wasnt kernel,iptables or ipp2p). now every iptables rule with ipp2p fails with
Code: | iptables v1.3.6: Couldn't load match `ipp2p'
Try `iptables -h' or 'iptables --help' for more information. |
I tried 2-3 versions of iptables, tried iptables with and without extensions flag. ipp2p-8.0 and 8.2 (found at gentoo bugs) doesn't matter:/ I did even couple of `emerge -e world` just in case. I tried to google about it but everyone has slightly different error followed by smth about loading shared object or file which isn't the case here.
I need ipp2p because without it my neighbours upload too much. I tried l7-filter and it loads correctly but that's it. it cant even -j DROP http packets in forward chain (which should be very easy) let alone marking p2p traffic.
Last edited by Paczesiowa on Sat Nov 11, 2006 5:34 pm; edited 1 time in total |
|
Back to top |
|
|
dj_farid l33t
Joined: 14 Jun 2004 Posts: 613
|
Posted: Tue Nov 07, 2006 8:29 pm Post subject: |
|
|
Exact same problem here. You are not alone
For some reason it does not find/load the ipt_ipp2p module, even though it is there. |
|
Back to top |
|
|
Paczesiowa Guru
Joined: 06 Mar 2006 Posts: 593 Location: Oborniki Śląskie, Poland
|
Posted: Sat Nov 11, 2006 5:33 pm Post subject: |
|
|
ok I solved it with (I think) correct iptables version...
right now I got:
gentoo-sources-2.6.18-r1
iptables-1.3.5-r4 (no extensions flag)
ipp2p-0.8.2
so I suggest emerge iptables, emerge ipp2p, reboot.
I'm not going to touch it again... |
|
Back to top |
|
|
dj_farid l33t
Joined: 14 Jun 2004 Posts: 613
|
Posted: Sat Nov 11, 2006 11:51 pm Post subject: |
|
|
I am using the vanilla-kernel and have the latest stable version, which is 2.6.17.13.
I have iptables-1.3.6-r1 which is the masked version since the earlier stable version did not work nicely with l7-filter...
The extensions flag is there for the l7-filter.
I need to use either l7-filter or ipp2p. My guess is that ipp2p would do the job better than l7-filter. I don't need them both.
Now I have l7-filter working somehow (not perfect). So I am afraid to bork it up even worse if I try to get ipp2p working.
Do you know what made it not work with your previous versions?
Maybe I just have to wait until the 2.6.18 kernel is marked stable before I continue..? |
|
Back to top |
|
|
dj_farid l33t
Joined: 14 Jun 2004 Posts: 613
|
Posted: Thu Nov 23, 2006 2:14 pm Post subject: |
|
|
I have now upgraded to the gentoo-sources 2.6.18-r3. Still the same problem.
Here you can see that the files are installed where they should be, but still iptables does not seem to understand that it is there:
Code: | # ls /lib/iptables
libipt_CLASSIFY.so libipt_REDIRECT.so libipt_connbytes.so libipt_layer7.so libipt_sctp.so
libipt_CLUSTERIP.so libipt_REJECT.so libipt_connlimit.so libipt_length.so libipt_standard.so
libipt_CONNMARK.so libipt_SAME.so libipt_connmark.so libipt_limit.so libipt_state.so
libipt_DNAT.so libipt_SNAT.so libipt_conntrack.so libipt_mac.so libipt_stealth.so
libipt_DSCP.so libipt_TARPIT.so libipt_dccp.so libipt_mark.so libipt_string.so
libipt_ECN.so libipt_TCPMSS.so libipt_dscp.so libipt_multiport.so libipt_tcp.so
libipt_LOG.so libipt_TOS.so libipt_ecn.so libipt_owner.so libipt_tcpmss.so
libipt_MARK.so libipt_TRACE.so libipt_esp.so libipt_physdev.so libipt_tos.so
libipt_MASQUERADE.so libipt_TTL.so libipt_hashlimit.so libipt_pkttype.so libipt_ttl.so
libipt_MIRROR.so libipt_ULOG.so libipt_helper.so libipt_policy.so libipt_udp.so
libipt_NETMAP.so libipt_addrtype.so libipt_icmp.so libipt_realm.so libipt_unclean.so
libipt_NFQUEUE.so libipt_ah.so libipt_ipp2p.so libipt_recent.so
libipt_NOTRACK.so libipt_comment.so libipt_iprange.so libipt_rpc.so
# iptables -m ipp2p --help
iptables v1.3.6: Couldn't load match `ipp2p'
Try `iptables -h' or 'iptables --help' for more information.
# ls /lib/modules/2.6.18-gentoo-r3/ipp2p/
ipt_ipp2p.ko
|
Latest iptables with extensions and l7filter USE flags is what I got now:
Code: | # emerge -vp iptables
These are the packages that would be merged, in order:
Calculating dependencies... done!
[ebuild R ] net-firewall/iptables-1.3.6-r1 USE="extensions l7filter -imq -ipv6 -static" 0 kB
Total size of downloads: 0 kB
|
Latest ipp2p:
Code: | # emerge -pv ipp2p
These are the packages that would be merged, in order:
Calculating dependencies... done!
[ebuild R ] net-firewall/ipp2p-0.8.2 0 kB [1]
Total size of downloads: 0 kB
Portage overlays:
[1] /usr/local/portage
|
EDIT:
Code: | # modprobe ipt_ipp2p |
dmesg shows this: "IPP2P v0.8.2 loading". |
|
Back to top |
|
|
|