iptables-1.3.1安装时的报错信息如内容!

boypicc

redhalt 9.1 (内核已升级2.4.20-2.6.10)因为,在2.6.10内核下,iptables1.2.7a不能用了,提示信息:
[root@linux extensions]# iptables -L
iptables v1.2.7a: can't initialize iptables table `filter': iptables who? (do yo
u need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[root@linux extensions]#
以下是安装过程:

[root@linux iptables-1.3.1]# make
make: *** No rule to make target `extensions/libip6t_MARK.c', needed by `extensi
ons/libip6t_MARK.d'.  Stop.

我在extensions找了一下,确实没有libip6t_MARK.c这个文件,但是有libip6t_mark.c这个文件,我用cp libip6t_mark.c libip6t_MARK.c 接着编译,又出现:
[root@linux iptables-1.3.1]# cd extensions
[root@linux extensions]# cp libip6t_mark.c libip6t_MARK.c
[root@linux extensions]# cd ..
[root@linux iptables-1.3.1]# make
make: *** No rule to make target `extensions/libip6t_HL.c', needed by `extension
s/libip6t_HL.d'.  Stop.
同样的方法:
[root@linux iptables-1.3.1]# cd extensions
[root@linux extensions]# cp libip6t_hl.c libip6t_HL.c
[root@linux extensions]# cd ..
[root@linux iptables-1.3.1]# make
make: *** No rule to make target `extensions/libipt_TTL.c', needed by `extension
s/libipt_TTL.d'.  Stop.
接着出现如下错误:
[root@linux extensions]# cd ..
[root@linux iptables-1.3.1]# make
Something wrong... deleting dependencies.


    Please try `make KERNEL_DIR=path-to-correct-kernel'.


make: *** [include/linux/netfilter_ipv6/ip6t_hl.h] Error 1
[root@linux iptables-1.3.1]#
在include/linux/netfilter_ipv6/目录下竟然没有ip6t_hl.h这个文件.
我又执行如下操作:
[root@linux netfilter_ipv6]# cp ip6t_HL.h ip6t_hl.h
[root@linux netfilter_ipv6]# pwd
/home/liuy/iptables-1.3.1/include/linux/netfilter_ipv6
[root@linux netfilter_ipv6]# cd ../../../
[root@linux iptables-1.3.1]# pwd
/home/liuy/iptables-1.3.1
[root@linux iptables-1.3.1]# make
Making dependencies: please wait...
make: *** No rule to make target `extensions/libipt_MARK.c', needed by `extensio
ns/libipt_MARK.d'.  Stop.
[root@linux iptables-1.3.1]#
接下来的错误是:
[root@linux iptables-1.3.1]# cd extensions
[root@linux extensions]# cp libipt_dscp.c libipt_DSCP.c
[root@linux extensions]# cd ..
[root@linux iptables-1.3.1]# make
make: *** No rule to make target `extensions/libipt_CONNMARK.c', needed by `exte
nsions/libipt_CONNMARK.d'.  Stop.
[root@linux iptables-1.3.1]# cd extensions
[root@linux extensions]# cp libipt_connmark.c libipt_CONNMARK.C
[root@linux extensions]# cp libipt_connmark.c libipt_CONNMARK.c
[root@linux extensions]# cp libipt_TCPMSS.c libipt_tcpmss.c
[root@linux extensions]# cd ..
[root@linux iptables-1.3.1]# make
Extensions found:
cc -O2 -Wall -Wunused -I/usr/src/linux/include -Iinclude/ -DIPTABLES_VERSION=\"1
.3.1\"  -D_UNKNOWN_KERNEL_POINTER_SIZE -fPIC -o extensions/libipt_ah_sh.o -c ext
.............(无错误信息)
ld -shared  -o extensions/libip6t_eui64.so extensions/libip6t_eui64_sh.o
cc -O2 -Wall -Wunused -I/usr/src/linux/include -Iinclude/ -DIPTABLES_VERSION=\"1
.3.1\"  -D_UNKNOWN_KERNEL_POINTER_SIZE -fPIC -o extensions/libip6t_hl_sh.o -c ex
etensions/libip6t_hl.c
extensions/libip6t_hl.c: In function `parse':
extensions/libip6t_hl.c:48: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:48: `IP6T_HL_NE' undeclared (first use in this function)
extensions/libip6t_hl.c:48: (Each undeclared identifier is reported only once
extensions/libip6t_hl.c:48: for each function it appears in.)
extensions/libip6t_hl.c:50: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:50: `IP6T_HL_EQ' undeclared (first use in this function)
extensions/libip6t_hl.c:53: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:62: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:62: `IP6T_HL_LT' undeclared (first use in this function)
extensions/libip6t_hl.c:63: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:72: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:72: `IP6T_HL_GT' undeclared (first use in this function)
extensions/libip6t_hl.c:73: dereferencing pointer to incomplete type
extensions/libip6t_hl.c: In function `print':
extensions/libip6t_hl.c:97: `IP6T_HL_EQ' undeclared (first use in this function)
extensions/libip6t_hl.c:97: nonconstant array index in initializer
extensions/libip6t_hl.c:97: (near initialization for `op')
extensions/libip6t_hl.c:98: `IP6T_HL_NE' undeclared (first use in this function)
extensions/libip6t_hl.c:98: nonconstant array index in initializer
extensions/libip6t_hl.c:98: (near initialization for `op')
extensions/libip6t_hl.c:99: `IP6T_HL_LT' undeclared (first use in this function)
extensions/libip6t_hl.c:99: nonconstant array index in initializer
extensions/libip6t_hl.c:99: (near initialization for `op')
extensions/libip6t_hl.c:100: `IP6T_HL_GT' undeclared (first use in this function
)
extensions/libip6t_hl.c:100: nonconstant array index in initializer
extensions/libip6t_hl.c:100: (near initialization for `op')
extensions/libip6t_hl.c:105: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:105: dereferencing pointer to incomplete type
extensions/libip6t_hl.c: In function `save':
extensions/libip6t_hl.c:112: `IP6T_HL_EQ' undeclared (first use in this function
)
extensions/libip6t_hl.c:112: nonconstant array index in initializer
extensions/libip6t_hl.c:112: (near initialization for `op')
extensions/libip6t_hl.c:113: `IP6T_HL_NE' undeclared (first use in this function
)
extensions/libip6t_hl.c:113: nonconstant array index in initializer
extensions/libip6t_hl.c:113: (near initialization for `op')
extensions/libip6t_hl.c:114: `IP6T_HL_LT' undeclared (first use in this function
)
extensions/libip6t_hl.c:114: nonconstant array index in initializer
extensions/libip6t_hl.c:114: (near initialization for `op')
extensions/libip6t_hl.c:115: `IP6T_HL_GT' undeclared (first use in this function
)
extensions/libip6t_hl.c:115: nonconstant array index in initializer
extensions/libip6t_hl.c:115: (near initialization for `op')
extensions/libip6t_hl.c:120: dereferencing pointer to incomplete type
extensions/libip6t_hl.c:120: dereferencing pointer to incomplete type
extensions/libip6t_hl.c: At top level:
extensions/libip6t_hl.c:135: sizeof applied to an incomplete type
extensions/libip6t_hl.c:136: sizeof applied to an incomplete type
make: *** [extensions/libip6t_hl_sh.o] Error 1
[root@linux iptables-1.3.1]#

iptables-1.3.1文件,从www.netfiler.org上下载,我试了别的版本,1.3.1之前的,也这样!

neplusultra

配置内核时把netfilter中关于iptables的选项配置成模块，然后make　modules_install，
再装iptables看看？

aaccdd

首先检查配置内核时是否正确配置了netfiler
然后检查是否加载了模块
lsmod|grep iptable

建议使用apt升级iptables，
apt安装使用方法看redhat版置顶贴。

如果要自己编译安装iptables，
首先阅读README，
确认满足编译的依赖条件。
编译安装的过程参考源码包内的README/INSTALL文档。