DSCP support in iptables 1.2.8

Can anyone confirm that the DSCP target works in iptables 1.2.8 (or 1.2.7a) ?

I am running Red Hat 8.0. I have upgraded the kernel to 2.4.20. I have also installed iptables 1.2.8 and when running the command:

iptables -A FORWARD -t mangle -j DSCP --set-dscp 0x1f

I get the following message:

iptables: No chain/target/match by that name

According to the docs on the netfilter site, the above command should work. Does anyone know why it doesn't?

thank you

Isabelle

--
Isabelle Labbe
Communications Research Centre Canada
3701 Carling Av.
PO Box 11490, Station H
Ottawa, On
K2H 8S2

email: [email protected]
tel:  (613) 998-1410
fax:  (613) 998-9648

Works for me with iptables 1.2.7a from netfilter.org. I tested the command you mentioned and it worked.

I am running Debian unstable, but that doesn't matter. I think the iptables capabilities depend on

a) The kernel configuration. Check out the CONFIG_IP_NF_* options in the kernel configuration file and reconfigure/recompile the kernel source code if needed. A quick look at the content of the kernel netfilter directory may also help:

ls /lib/modules/KERNEL_VER/kernel/net/ipv4/netfilter/

DSCP match kernel module name: ipt_dscp.o
DSCP target kernel module name: ipt_DSCP.o

b) The availability of iptables shared object modules. Check out

ls /usr/{,local/}lib/iptables/

DSCP match userspace module name: libipt_dscp.so DSCP target userspace module name: libipt_DSCP.so

--
Ilguiz Latypov
Net Integration Technologies, Inc

tel. +1 (514) 281 9191 x 117