Skip to contentSkip to conversation

getting iptables into embedded kernel

DISCUSSION Klaus Wacker 2 participants 2 messages Jul 31, 2007

lore
Share & tools
lore
#0 lore raw
Quoted 33 lines
Quoted 4 lines

How to get iptables into a ppc kernel (2.6, netfilter enabled) and where to store what to have functionality from the start? I used NO_SHARED_LIBS=1
I am able to download start the kernel, but do not find iptables.

AFAIK you cannot.
Iptables is a *user*space utility to configure the Netfilter framework and I don't see how you'd compile that into the kernel.

Rob

Ok, I am a little confused with kernel modules. Anyhow I would like to do something like this here (from the install):
"
4) If you want to build a statically linked version of the iptables binary, without the need for loading the plugins at runtime (e.g. for an embedded device or router-on-a-disk), please use

% make NO_SHARED_LIBS=1
"

and I get a rather large executable binary (700kB). But I can't execute this nor do I know how to make it run inside my target. Klaus

This is something different from compiling things "into" the kernel. You've just built a statically linked iptables binary: those binaries don't need external libraries, which is why they are larger because the functionality in the libraries must be present in the binary to actually make it standalone.

Quoted 5 lines

So, you still get a binary called iptables which must be run from some shell (I guess).

Rob

Yes, did that and then I try to run it but it only says "cannot execute binary file" even I can execute other files.
Klaus

_______________________________________________________________________
Jetzt neu! Schützen Sie Ihren PC mit McAfee und WEB.DE. 3 Monate kostenlos testen. http://www.pc-sicherheit.web.de/startseite/?mc=022220

#1 lore raw
Quoted 2 lines · Klaus Wacker

Yes, did that and then I try to run it but it only says "cannot execute binary file"

What machine were you using to compile the iptables binary?

You mentioned, your target machine is a PPC, if you compile iptables on an x86 machine without cross compiling option for PPC, you will end up with an Intel binary that will not run on Power-PC architecture.

Frank

Signature · 5 lines
INPHO GmbH   *   Smaragdweg 1   *   70174 Stuttgart   *   Germany
phone: +49 711 2288 10  *  fax: +49 711 2288 111  *  web: www.inpho.de
place of business: Stuttgart    *   managing director: Johannes Saile
commercial register: Stuttgart, HRB 9586
Visit us at Trimble Dimensions 2007