trunk's iptalbe not has TTL. backfire is has. please use
< $(eval $(call nf_add,IPT_IPOPT,CONFIG_NETFILTER_XT_MATCH_HL, $(P_XT)xt_hl)) 136d134 < $(eval $(call nf_add,IPT_IPOPT,CONFIG_NETFILTER_XT_TARGET_HL, $(P_XT)xt_HL)) 148d145 < # XXX: ttl/TTL extensions have been merged in ttl/TTL in linux 2.6.30, but not yet in iptables 150,151c147,148 < $(eval $(if $(NF_KMOD),,$(call nf_add,IPT_IPOPT,CONFIG_IP_NF_MATCH_TTL, $(P_V4)ipt_ttl))) < $(eval $(if $(NF_KMOD),,$(call nf_add,IPT_IPOPT,CONFIG_IP_NF_TARGET_TTL, $(P_V4)ipt_TTL))) --- > $(eval $(call nf_add,IPT_IPOPT,CONFIG_NETFILTER_XT_MATCH_HL, $(P_XT)xt_hl)) > $(eval $(call nf_add,IPT_IPOPT,CONFIG_NETFILTER_XT_TARGET_HL, $(P_XT)xt_HL)) 2010/11/20 OpenWrt <openwrt-devel@lists.openwrt.org> > #8181: iptables ttl option not working > > --------------------------------+------------------------------------------- > Reporter: cheza...@… | Owner: jow > Type: defect | Status: accepted > Priority: normal | Milestone: Kamikaze > Component: packages | Version: Trunk > Keywords: | > > --------------------------------+------------------------------------------- > > Comment(by markus_kub...@…): > > Using KAMIKAZE (bleeding edge, r23991), there also are no TOS and LENGTH > libraries. WTF? On Backfire 10.03.01-RC3 this worked. (But there were > more packages installed.) > > on vanilla do:[[BR]] > # opkg install kmod-ipt-ipopt > > # sh shaping-script[[BR]] > iptables v1.4.9.1: Couldn't load match `length':File not found[[BR]] > iptables v1.4.9.1: Couldn't load match `tos':File not found[[BR]] > > > # opkg info kmod-ipt-ipopt[[BR]] > Package: kmod-ipt-ipopt[[BR]] > Version: 2.6.32.25-1[[BR]] > Depends: kernel (= 2.6.32.25-1), kmod-ipt-core[[BR]] > Provides:[[BR]] > Status: install hold,user installed[[BR]] > Section: kernel[[BR]] > Architecture: ar71xx[[BR]] > Maintainer: OpenWrt Developers Team <openwrt-de...@openwrt.org>[[BR]] > MD5Sum: 9af035f5516eeb867a78b45f5ea5b160[[BR]] > Size: 11919[[BR]] > Filename: kmod-ipt-ipopt_2.6.32.25-1_ar71xx.ipk[[BR]] > Source: package/kernel[[BR]] > Description: Netfilter (IPv4) modules for matching/changing IP packet > options[[BR]] > Includes: > - CLASSIFY > - dscp/DSCP > - ecn/ECN > - hl/HL (2.6.30 and later) > - length > - mark/MARK > - statistic (2.6) > - tcpmss > - time > - tos/TOS (prior to 2.6.25) > - ttl/TTL (prior to 2.6.30) > - unclean > Installed-Time: 1290209572 > > # ls /usr/lib/iptables[[BR]] > libipt_DNAT.so libipt_MASQUERADE.so libipt_SNAT.so > [[BR]]libxt_NOTRACK.so libxt_comment.so libxt_mac.so > libxt_standard.so libxt_tcp.so[[BR]] > libipt_LOG.so libipt_REJECT.so libipt_icmp.so > [[BR]]libxt_TCPMSS.so libxt_limit.so libxt_multiport.so > libxt_state.so libxt_udp.so[[BR]] > > I see the ticket is 2 Weeks old, when will there be a fix? > > -- > Ticket URL: <https://dev.openwrt.org/ticket/8181#comment:3> > OpenWrt <http://openwrt.org> > Opensource Wireless Router Technology > _______________________________________________ > openwrt-tickets mailing list > openwrt-tick...@lists.openwrt.org > https://lists.openwrt.org/mailman/listinfo/openwrt-tickets > --
_______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
