Skip to contentSkip to conversation

krn 2.4.30, iptables 1.3.1, last pom and condition extension problem

DISCUSSION Samuel Díaz García 2 participants 4 messages Apr 18, 2005 – Apr 21, 2005

lore
Share & tools
lore
#0 lore raw

I had trying to use -m condition iptables extension module, but when I see /proc/net I cant see ipt_condition directory and I can't make it.

I try to put in --condition parameter an absolut path, the iptables command had no problem running, but seems it allways assume "1" when I put "1" or "0" into it.

I use lines as these:

#> echo "0" > /my_conditions/ipp2p_on
#> iptables -A FORWARD -m condition ! --condition /my_conditionss/ipp2p_on -m ipp2p --ipp2p -j DROP

And, the idea is, to enable or disable ipp2p software transfers is only put "1" or "0" into the condition.

¿Some helps about this problem?

How can I make the /proc/net/ipt_condition directory?

Thanks

Signature · 10 lines
   Samuel Díaz García
    Director Gerente
ArcosCom Wireless, S.L.L.

mailto:[email protected]
http://www.arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83
#1 lore raw

¿Any suggestion?

Quoted 17 lines · Samuel Díaz García

I had trying to use -m condition iptables extension module, but when I see /proc/net I cant see ipt_condition directory and I can't make it.

I try to put in --condition parameter an absolut path, the iptables command had no problem running, but seems it allways assume "1" when I put "1" or "0" into it.

I use lines as these:

#> echo "0" > /my_conditions/ipp2p_on
#> iptables -A FORWARD -m condition ! --condition /my_conditionss/ipp2p_on -m ipp2p --ipp2p -j DROP

And, the idea is, to enable or disable ipp2p software transfers is only put "1" or "0" into the condition.

¿Some helps about this problem?

How can I make the /proc/net/ipt_condition directory?

Thanks

Signature · 10 lines
   Samuel Díaz García
    Director Gerente
ArcosCom Wireless, S.L.L.

mailto:[email protected]
http://www.arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83
#2 lore raw
Quoted 4 lines · On Wed, 20 Apr 2005, [ISO-8859-15] Samuel Díaz García wrote:
Quoted 4 lines

I had trying to use -m condition iptables extension module, but when I see /proc/net I cant see ipt_condition directory and I can't make it.

How can I make the /proc/net/ipt_condition directory?

modprobe ipt_condition

Best regards,
Jozsef
-
E-mail : [email protected], [email protected] PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics

          H-1525 Budapest 114, POB. 49, Hungary
#3 lore raw

Yes, when the "ipt_condition" module is loaded it creates the directory and the files with "0" into them.

We don't need to manually create the "ipt_condition" directory or the files (we can't write into /proc, I think).

If we need to add more condition files, only need to add the iptables rule and then "rmmod ipt_condition" and then iptables will load by itself the "ipt_condition" module when it was needed.

If you dont see the "ipt_condition" module with "lsmod | grep condition" command, you will need to run "modprobe ipt_condition" by hand.

Best regards and thanks to all for your help.

Quoted 21 lines · Jozsef Kadlecsik
Quoted 4 lines · On Wed, 20 Apr 2005, [ISO-8859-15] Samuel Díaz García wrote:
Quoted 4 lines

I had trying to use -m condition iptables extension module, but when I see /proc/net I cant see ipt_condition directory and I can't make it.

How can I make the /proc/net/ipt_condition directory?

modprobe ipt_condition

Best regards,
Jozsef
-
E-mail : [email protected], [email protected] PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics

          H-1525 Budapest 114, POB. 49, Hungary
Signature · 10 lines
   Samuel Díaz García
    Director Gerente
ArcosCom Wireless, S.L.L.

mailto:[email protected]
http://www.arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83