xtables-addons searching libipt_*.so instead of libxt_*.so

xtables-addons searching libipt_*.so instead of libxt_*.so

[Hari Hendaryanto]

I was recently build xtables-addons-1.23

my  platform:
fedora 12 x86_64
kernel 2.6.31.12-174.2.22.fc12.x86_64
iptables 1.4.6-2.fc12.x86_64

I configure xtables with

./configure --with-kbuild=/lib/modules/`uname -r`/build 
--with-xtlibdir=/lib64/xtables
make
make install

it was compiled cleanly
no error produce until final step.

when i try to load match, i.e geoip match i found this error

iptables v1.4.6: Couldn't load match 
`geoip':/lib64/xtables/libipt_geoip.so: cannot open shared object file: 
No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

i've check /lib64/xtables and i see libxt_geoip.so is there

why iptables search /lib64/xtables/libipt_geoip.so not 
/lib64/xtables/libxt_geoip.so ?

thanks in advance

Re: xtables-addons searching libipt_*.so instead of libxt_*.so

[Jan Engelhardt]

On Friday 2010-02-26 01:48, Hari Hendaryanto wrote:
>
> when i try to load match, i.e geoip match i found this error
>
> iptables v1.4.6: Couldn't load match `geoip':/lib64/xtables/libipt_geoip.so:
> cannot open shared object file: No such file or directory
>
> i've check /lib64/xtables and i see libxt_geoip.so is there
>
> why iptables search /lib64/xtables/libipt_geoip.so not
> /lib64/xtables/libxt_geoip.so ?

This is a suboptimal error message generated by iptables. iptables
tries to load both libxt_ and libipt_/libip6t_, however when all
failed, it only prints the last filename that was tried. We clearly
need to improve upon that.

You can try

	strace -e open iptables -m geoip -h

and see if it opens libxt_geoip.so at all.

Re: xtables-addons searching libipt_*.so instead of libxt_*.so

[Hari Hendaryanto]

Jan Engelhardt wrote:
> On Friday 2010-02-26 01:48, Hari Hendaryanto wrote:
>   
>> when i try to load match, i.e geoip match i found this error
>>
>> iptables v1.4.6: Couldn't load match `geoip':/lib64/xtables/libipt_geoip.so:
>> cannot open shared object file: No such file or directory
>>
>> i've check /lib64/xtables and i see libxt_geoip.so is there
>>
>> why iptables search /lib64/xtables/libipt_geoip.so not
>> /lib64/xtables/libxt_geoip.so ?
>>     
>
> This is a suboptimal error message generated by iptables. iptables
> tries to load both libxt_ and libipt_/libip6t_, however when all
> failed, it only prints the last filename that was tried. We clearly
> need to improve upon that.
>
> You can try
>
> 	strace -e open iptables -m geoip -h
>
> and see if it opens libxt_geoip.so at all.
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>   
thanks for quick response,

running

strace -e open iptables -m geoip -h

result

open("/etc/ld.so.cache", O_RDONLY)      = 3
open("/lib64/libip4tc.so.0", O_RDONLY)  = 3
open("/lib64/libxtables.so.4", O_RDONLY) = 3
open("/lib64/libm.so.6", O_RDONLY)      = 3
open("/lib64/libc.so.6", O_RDONLY)      = 3
open("/lib64/libdl.so.2", O_RDONLY)     = 3
open("/lib64/xtables/libxt_geoip.so", O_RDONLY) = -1 EACCES (Permission 
denied)
open("/lib64/xtables/libipt_geoip.so", O_RDONLY) = -1 ENOENT (No such 
file or directory)
iptables v1.4.6: Couldn't load match 
`geoip':/lib64/xtables/libipt_geoip.so: cannot open shared object file: 
No such file or directory

yes, it search for libxt_geoip.so. but open, get permission denied

ls -al /lib64/xtables/libxt_geoip.so

-rwxr-xr-x. 1 root root 13505 2010-02-25 04:12 /lib64/xtables/libxt_geoip.so

Re: xtables-addons searching libipt_*.so instead of libxt_*.so

[Hari Hendaryanto]

Hari Hendaryanto wrote:
> Jan Engelhardt wrote:
>> On Friday 2010-02-26 01:48, Hari Hendaryanto wrote:
>>  
>>> when i try to load match, i.e geoip match i found this error
>>>
>>> iptables v1.4.6: Couldn't load match 
>>> `geoip':/lib64/xtables/libipt_geoip.so:
>>> cannot open shared object file: No such file or directory
>>>
>>> i've check /lib64/xtables and i see libxt_geoip.so is there
>>>
>>> why iptables search /lib64/xtables/libipt_geoip.so not
>>> /lib64/xtables/libxt_geoip.so ?
>>>     
>>
>> This is a suboptimal error message generated by iptables. iptables
>> tries to load both libxt_ and libipt_/libip6t_, however when all
>> failed, it only prints the last filename that was tried. We clearly
>> need to improve upon that.
>>
>> You can try
>>
>>     strace -e open iptables -m geoip -h
>>
>> and see if it opens libxt_geoip.so at all.
>> -- 
>> To unsubscribe from this list: send the line "unsubscribe 
>> netfilter-devel" in
>> the body of a message to majordomo@vger.kernel.org
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>   
> thanks for quick response,
>
> running
>
> strace -e open iptables -m geoip -h
>
> result
>
> open("/etc/ld.so.cache", O_RDONLY)      = 3
> open("/lib64/libip4tc.so.0", O_RDONLY)  = 3
> open("/lib64/libxtables.so.4", O_RDONLY) = 3
> open("/lib64/libm.so.6", O_RDONLY)      = 3
> open("/lib64/libc.so.6", O_RDONLY)      = 3
> open("/lib64/libdl.so.2", O_RDONLY)     = 3
> open("/lib64/xtables/libxt_geoip.so", O_RDONLY) = -1 EACCES 
> (Permission denied)
> open("/lib64/xtables/libipt_geoip.so", O_RDONLY) = -1 ENOENT (No such 
> file or directory)
> iptables v1.4.6: Couldn't load match 
> `geoip':/lib64/xtables/libipt_geoip.so: cannot open shared object 
> file: No such file or directory
>
> yes, it search for libxt_geoip.so. but open, get permission denied
>
> ls -al /lib64/xtables/libxt_geoip.so
>
> -rwxr-xr-x. 1 root root 13505 2010-02-25 04:12 
> /lib64/xtables/libxt_geoip.so
>
arrgh, sorry for the disturbance, i think it's caused by selinux

thanks for pointing me to the right direction anyway

regards