Skip to contentSkip to conversation

iptables and FTOS syntax error

DISCUSSION Thomas Kuiper 2 participants 2 messages Oct 14, 2005

lore
Share & tools
lore
#0 lore raw

Hello,

I have a bizarre problem with iptables when I'm trying to use FTOS:

First, the following works fine using MARK:

iptables -j MARK -A POSTROUTING -t mangle -p udp --dport 123 --set-mark 4

But this one doesn't:

iptables -j FTOS -A POSTROUTING -t mangle -p udp --dport 123 --set-ftos 4

And gives the error message:

iptables: No chain/target/match by that name

A "iptables -j FTOS --help" shows that the FTOS extension was compiled in so I'm very confused about the error message.

-------------snip-----------&<----------------
FTOS target options
--set-ftos value Set TOS field in packet header to value
This value can be in decimal (ex: 32)
or in hex (ex: 0x20)
-------------snap----------->&----------------

Any help greatly appreciated,

Thomas

#1 lore raw

The past days I have a similar problem with iprange .. I was able to see in the help the reference to iprange (like you are able to see the help related to FTOS)

Well, the kernel *must* support FTOS.

I suggest see in your kernel to know if FTOS is supported.

This implies download the kernel source, then in the kernel source code directory.

make menuconfig

go to Network Options -> Netfilter configuration

and search for that option in the kernel.

Hope this help.

Jorge.

Quoted 29 lines · Thomas Kuiper

Hello,

I have a bizarre problem with iptables when I'm trying to use FTOS:

First, the following works fine using MARK:

iptables -j MARK -A POSTROUTING -t mangle -p udp --dport 123 --set-mark 4

But this one doesn't:

iptables -j FTOS -A POSTROUTING -t mangle -p udp --dport 123 --set-ftos 4

And gives the error message:

iptables: No chain/target/match by that name

A "iptables -j FTOS --help" shows that the FTOS extension was compiled in so I'm very confused about the error message.

-------------snip-----------&<----------------
FTOS target options
--set-ftos value Set TOS field in packet header to value
This value can be in decimal (ex: 32)
or in hex (ex: 0x20)
-------------snap----------->&----------------

Any help greatly appreciated,

Thomas

Signature · 1 line
Jorge Isaac Davila Lopez