missing libipt_mark.so

[sodb]

Hello,

I want to use iptables MARK feature. In Oleg 1.7.5.9-5 firmware kernel config it is enabled. However, the library module is lacking in /usr/lib/iptables/. Copying it from the openwrt distribution failed because of incorrect versions

#iptables -t mangle -A PREROUTING -p tcp --dport 999 -j mark --set-class 22

iptables: target `MARK' v1.2.9 (I'm v1.2.7a).

Can anyone help me optainng this file? Officially the -j MARK is in capitals. Probably, the library name has capitials as well: libipt_MARK.so. What should I enable in the config to obtain it after compiling the firmware?

[Oleg]

Custom firmware does not recompiles iptables. You need to do this manually using GPL_1.7.5.6 sources.

[sodb]

Thanks, I will recompile iptables and I will post the lib's on this site for other interested users.

[sodb]

I compiled the iptables extension libraries (included in attached tar). Unfortunately, adding e.g. libipt_main.so and libipt_MAIN.so to the /usr/lib/iptables directory did not allow me to execute iptables -t mangle -j MARK --set-mark 11 or alike commands.

/usr/lib/iptables # iptables -A PREROUTING -t mangle -j MARK --set-mark 1

results in

iptables v1.2.7a: Unknown arg `--set-mark'
Try `iptables -h' or 'iptables --help' for more information.

When entering

/usr/lib/iptables # iptables -A PREROUTING -t mangle -j MARK
iptables v1.2.7a: Couldn't load target `MARK':/usr/lib/iptables/libipt_MARK.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

Does anybody has a clue?