NetFilter
[Top] [All Lists]

Re: Iptables 1.3.7 and uClibc

To: netfilter@lists.netfilter.org
Subject: Re: Iptables 1.3.7 and uClibc
From: Alan Ezust <alan.ezust@presinet.com>
Date: Thu, 22 Feb 2007 15:08:26 -0800
Cc:
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <45DC6B39.8040907@cetrtapot.si>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: Presinet, Inc
References: <45DC6B39.8040907@cetrtapot.si>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: KMail/1.9.5
I'd recommend uncommenting the

 NO_SHARED_LIBS = 1

at the top of the Makefile. That way they will all be built into one binary 
and you won't have to worry about the executable finding things.



On Wednesday 21 February 2007 07:54, hinko.kocevar@cetrtapot.si wrote:
> Hello,
>
> I'm trying to build iptables 1.3.7 with uClibc 0,9,27 for cris
> architecture. I'm having some problems while loading shared ipt
> libraries (when invoking iptables). Build string:
>
> CC="gcc_cris -mlinux -DLINUX -DLINUX_SYSTEM -D_REENTRANT
> -mno-mul-bug-workaround
> -muclibc=/home/hinkok/delo/fw/car2_R1-uclibc.gen/stage.uclibc" \
> CROSS="cris-axis-linux-gnu-" \
> CFLAGS="-O2 -pipe -Wall" \
> LDFLAGS="-L/home/hinkok/delo/fw/car2_R1-uclibc.gen/stage.uclibc/lib
> -Wl,-rpath-link,/home/hinkok/delo/fw/car2_R1-uclibc.gen/stage.uclibc/lib" \
> STATIC="" \
> KERNEL_DIR=\"/home/hinkok/delo/fw/car2_R1-uclibc.gen/pkg/linux-R2/build/ucl
>ibc/\" \
> LIBDIR="/lib" \
> make \
> all
>
>
> I've managed to build iptables with my cross-compile toolchain. On
> target system I can run the iptables binary:
> # iptables --version
> iptables v1.3.7
> # iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
> When trying to set som rules I get following error:
>
> # iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> iptables v1.3.7: Couldn't load target '/lib/iptables/libipt_MASQUERADE.so'
>
> Try `iptables -h' or 'iptables --help' for more information.
>
> I've hacked the iptables.c source to get full path displayed when error
> occurs. I can verify that the file /lib/iptables/libipt_MASQUERADE.so
> actually exists on the target rootfs.
>
> What am I missing here?!
>
> PS.: I've tried to statically compile iptables but with no avail -
> iptables failed with:
>
> # iptables
> getsockopt failed strangely: No such file or directory
>
>
> best regards,
> hinko

-- 
Alan Ezust            www.presinet.com
Presinet, inc         alan.ezust@presinet.com
           Victoria, BC, Canada

Attachment: pgphsjp8cRwUf.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>