iptables-1.3.8 netfilter/ 的 源代码 Multimedia program 多媒体 238万源代码下载-
&文件名称: iptables-1.3.8
& & & & &&]
&&所属分类:
&&开发工具: Unix_Linux
&&文件大小: 360 KB
&&上传时间:
&&下载次数: 29
&&提 供 者:
&详细说明：netfilter/iptable的iptable源代码-netfilter/iptable the iptable source code
文件列表(日期：~)(点击判断是否您需要的文件，如果是垃圾请在下面评价投诉):
&&iptables-1.3.8&&..............\&&..............\&&..............\extensions&&..............\..........\.ah-test6&&..............\..........\.CLUSTERIP-test&&..............\..........\.condition-test&&..............\..........\.condition-test6&&..............\..........\.connbytes-test&&..............\..........\.dccp-test&&..............\..........\.esp-test6&&..............\..........\.frag-test6&&..............\..........\.hashlimit-test6&&..............\..........\.ipv6header-test6&&..............\..........\.mh-test6&&..............\..........\.NFLOG-test&&..............\..........\.NFLOG-test6&&..............\..........\.opts-test6&&..............\..........\.quota-test&&..............\..........\.recent-test&&..............\..........\.REJECT-test6&&..............\..........\.rt-test6&&..............\..........\.sctp-test6&&..............\..........\.set-test&&..............\..........\.statistic-test&&..............\..........\.string-test&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\libip6t_condition.man&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\libip6t_esp.man&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\libip6t_length.man&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\libipt_ah.man&&..............\..........\&&..............\..........\libipt_CLASSIFY.man&&..............\..........\&&..............\..........\&&..............\..........\&&..............\..........\libipt_comment.man&&..............\..........\&&..............\..........\libipt_condition.man
&近期下载过的用户:
&相关搜索:
&输入关键字，在本站238万海量源码库中尽情搜索：
&[] - netfilter NF_IP_PRE_ROUTING处挂载钩子函数过滤组播广播包并用netlink发送至用户空间
&[] - knetfilter-3.3.0.tar Linux
&[] - 本书是“TCP/IP详解系列”的延续。主要内容包括：TCP事务协议，即T/TCP，这是对TCP的扩展，使客户-服务器事务更快、更高效和更可靠；TCP/IP应用，主要是HTTP和NNTP；UNIX域协议，这些协议提供了进程之间通信的一种手段。当客户与服务器进程在同一台主机上时，UNIX域协议通常要比T
&[] - linux防火墙的介绍，以及netfilter，iptables的实现
&[] - 本文介绍了iptables，以便你可以领会iptables的精彩，文中不包含iptables或netfilter在
安全方面的 bug。如果你发现iptables（或其组成部分）任何bug或特殊的行为，请联系
Netfilter mailing lists ，他们会告诉你那是否是bug或如何解决
&[] - 对从网络截获的数据包进行自动分析，包括数据包的类型，协议，端口
&[] - 网络过滤驱动文档。对网络mac层地址的加解密文档，可以解决内网通讯安全
&[] - netfilter源码。通俗的说，netfilter的架构就是在整个网络流程的若干位置放置了一些检测点（HOOK），而在每个检测点上上登记了一些处理函数进行处理（如包过滤，NAT等，甚至可以是 用户自定义的功能）。
&[] - 是一本关于iptable学习的指南书，不错，希望和各位分享
&[] - 该代码实现基于netfilter的简单内核级防火墙，可以实现对IP路由的控制，是入门学习netfilter的好材料IPTables/Conntrack
Share your knowledge at the .
Remember Me?
Linux - Server This forum is for the discussion of Linux Software used in a server related context.
Registered: Jun 2009
IPTables/Conntrack
I upgraded to the 2.6.27 kernel and iptables to 1.4.2 but can't seem to get CSF to run and i believe its because of conntrack not being found:
error: &net.netfilter.nf_conntrack_icmp_timeout& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_close& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_time_wait& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_last_ack& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_close_wait& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_fin_wait& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_established& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_syn_recv& is an unknown key
error: &net.netfilter.nf_conntrack_tcp_timeout_syn_sent& is an unknown key
error: &net.netfilter.nf_conntrack_udp_timeout& is an unknown key
error: &net.netfilter.nf_conntrack_udp_timeout_stream& is an unknown key
net.netfilter.nf_conntrack_max = 262144
kernel config:
# Core Netfilter Configuration
CONFIG_NETFILTER_NETLINK=m
CONFIG_NETFILTER_NETLINK_QUEUE=m
CONFIG_NETFILTER_NETLINK_LOG=m
CONFIG_NF_CONNTRACK=m
CONFIG_NF_CT_ACCT=y
CONFIG_NF_CONNTRACK_MARK=y
# CONFIG_NF_CONNTRACK_SECMARK is not set
# CONFIG_NF_CONNTRACK_EVENTS is not set
CONFIG_NF_CT_PROTO_DCCP=m
CONFIG_NF_CT_PROTO_SCTP=m
# CONFIG_NF_CT_PROTO_UDPLITE is not set
# CONFIG_NF_CONNTRACK_AMANDA is not set
CONFIG_NF_CONNTRACK_FTP=m
# CONFIG_NF_CONNTRACK_H323 is not set
# CONFIG_NF_CONNTRACK_IRC is not set
# CONFIG_NF_CONNTRACK_NETBIOS_NS is not set
# CONFIG_NF_CONNTRACK_PPTP is not set
# CONFIG_NF_CONNTRACK_SANE is not set
# CONFIG_NF_CONNTRACK_SIP is not set
# CONFIG_NF_CONNTRACK_TFTP is not set
# CONFIG_NF_CT_NETLINK is not set
CONFIG_NETFILTER_XTABLES=m
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m
CONFIG_NETFILTER_XT_TARGET_CONNMARK=m
# CONFIG_NETFILTER_XT_TARGET_DSCP is not set
CONFIG_NETFILTER_XT_TARGET_MARK=m
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
# CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
CONFIG_NETFILTER_XT_TARGET_NOTRACK=m
# CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
CONFIG_NETFILTER_XT_TARGET_SECMARK=m
# CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set
# CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
CONFIG_NETFILTER_XT_MATCH_COMMENT=m
CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m
CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
CONFIG_NETFILTER_XT_MATCH_DCCP=m
# CONFIG_NETFILTER_XT_MATCH_DSCP is not set
CONFIG_NETFILTER_XT_MATCH_ESP=m
CONFIG_NETFILTER_XT_MATCH_HELPER=m
# CONFIG_NETFILTER_XT_MATCH_IPRANGE is not set
CONFIG_NETFILTER_XT_MATCH_LENGTH=m
CONFIG_NETFILTER_XT_MATCH_LIMIT=m
CONFIG_NETFILTER_XT_MATCH_MAC=m
CONFIG_NETFILTER_XT_MATCH_MARK=m
CONFIG_NETFILTER_XT_MATCH_OWNER=m
CONFIG_NETFILTER_XT_MATCH_POLICY=m
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
CONFIG_NETFILTER_XT_MATCH_QUOTA=m
# CONFIG_NETFILTER_XT_MATCH_RATEEST is not set
CONFIG_NETFILTER_XT_MATCH_REALM=m
CONFIG_NETFILTER_XT_MATCH_SCTP=m
CONFIG_NETFILTER_XT_MATCH_STATE=m
CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
CONFIG_NETFILTER_XT_MATCH_STRING=m
CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
# CONFIG_NETFILTER_XT_MATCH_TIME is not set
# CONFIG_NETFILTER_XT_MATCH_U32 is not set
# CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set
# IP: Netfilter Configuration
# CONFIG_NF_CONNTRACK_IPV4 is not set
CONFIG_IP_NF_QUEUE=m
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_RECENT=m
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_AH=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_MATCH_ADDRTYPE=m
# CONFIG_IP_NF_MATCH_STEALTH is not set
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_LOG=m
CONFIG_IP_NF_TARGET_ULOG=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_TTL=m
CONFIG_IP_NF_RAW=m
# CONFIG_IP_NF_SECURITY is not set
CONFIG_IP_NF_ARPTABLES=m
CONFIG_IP_NF_ARPFILTER=m
CONFIG_IP_NF_ARP_MANGLE=m
# IPv6: Netfilter Configuration
# CONFIG_NF_CONNTRACK_IPV6 is not set
CONFIG_IP6_NF_QUEUE=m
CONFIG_IP6_NF_IPTABLES=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_MATCH_OPTS=m
CONFIG_IP6_NF_MATCH_FRAG=m
CONFIG_IP6_NF_MATCH_HL=m
CONFIG_IP6_NF_MATCH_IPV6HEADER=m
CONFIG_IP6_NF_MATCH_AH=m
# CONFIG_IP6_NF_MATCH_MH is not set
CONFIG_IP6_NF_MATCH_EUI64=m
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_LOG=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_RAW=m
# CONFIG_IP6_NF_SECURITY is not set
I'm running CentOS 5.3
Senior Member
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687
maybe this?
# IP: Netfilter Configuration
# CONFIG_NF_CONNTRACK_IPV4 is not set
[edit] might have been a bit terse - that option in your kernel config is marked as &not set& - which could be the cause of the errors you see.
The module is not there at all.
in &make menuconfig& you see this as:
IPv4 connection tracking support (required for NAT)
I don't know which modules are used or required by the script/program (CSF) you mention - I suppose it is this:
...if you happen to run a normal desktop computer or laptop - you don't need:
-programs like this
-CONNTRACK at all
for a router or server its a different story
L 08-04-2009 at .
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
code is Off
HTML code is Off
Similar Threads
Linux - Kernel
08-03-2009
Linux - Networking
06-24-2009
Linux - Networking
07-16-2005
Linux - Networking
01-06-2005
Linux - Security
12-02-2003
All times are GMT -5. The time now is .
Advertisement
Write for LQ
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, .
& Latest ThreadsMAC filtering using iptables/ebtables - Stack Overflow
Join the Stack Overflow Community
Stack Overflow is a community of 7.1 million programmers, just like you, helping each other.
J it only takes a minute:
I'm trying to drop a MAC address on a node in my network. Now, I tried two tools iptables and ebtables, but both attempts failed:
iptables -A INPUT -m mac --mac-source 00:0F:EA:91:04:08 -j DROP resulting in "iptables: No chain/target/match by that name."
ebtables -A INPUT -s 00:11:22:33:44:55 -j DROP resulting in "FATAL: Module ebtables not found. The kernel doesn't support the ebtables 'filter' table."
I'm working with Kernel version 2.6.32: uname -r results in "2.6.32-042stab049.6.emulab.1"
How can I make (at least one) it work? I've searched about this failures, but not much information is to be found. How do I make the kernel support the ebtables 'filter' table? How come there is "no chain/target/match by that name"?
3,31183350
Verify that you can actually list an INPUT chain:
# iptables -L
Hopefully that should something akin to:
Chain INPUT (policy ACCEPT)
prot opt source
destination
Chain FORWARD (policy ACCEPT)
prot opt source
destination
Chain OUTPUT (policy ACCEPT)
prot opt source
destination
As for ebtables, it apparently isn't actually part of your kernel.
You need to enable the ebtables options in your Kernel configuration
CONFIG_BRIDGE_NF_EBTABLES=y
CONFIG_BRIDGE_EBT_BROUTE=y
CONFIG_BRIDGE_EBT_T_FILTER=y
CONFIG_BRIDGE_EBT_T_NAT=y
CONFIG_BRIDGE_EBT_802_3=y
CONFIG_BRIDGE_EBT_AMONG=y
CONFIG_BRIDGE_EBT_ARP=y
CONFIG_BRIDGE_EBT_IP=y
CONFIG_BRIDGE_EBT_IP6=y
CONFIG_BRIDGE_EBT_LIMIT=y
CONFIG_BRIDGE_EBT_MARK=y
CONFIG_BRIDGE_EBT_PKTTYPE=y
CONFIG_BRIDGE_EBT_STP=y
CONFIG_BRIDGE_EBT_VLAN=y
CONFIG_BRIDGE_EBT_ARPREPLY=y
CONFIG_BRIDGE_EBT_DNAT=y
CONFIG_BRIDGE_EBT_MARK_T=y
CONFIG_BRIDGE_EBT_REDIRECT=y
CONFIG_BRIDGE_EBT_SNAT=y
CONFIG_BRIDGE_EBT_LOG=y
CONFIG_BRIDGE_EBT_ULOG=y
CONFIG_BRIDGE_EBT_NFLOG=y
then build the kernel and retry. Its also possible that something iptables relates is missing also.
Your Answer
Sign up or
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Post as a guest
By posting your answer, you agree to the
Not the answer you're looking for?
Browse other questions tagged
rev .25783
Stack Overflow works best with JavaScript enabled