After kernel upgrade, iptables cannot use mark

After the kernel is upgraded, iptables cannot use mark-general Linux technology-Linux programming and kernel information. For more information, see below. The following error message is displayed when you run iptables:

# Iptables-I PREROUTING-t mangle-p tcp-s 192.168.1.0/24-j MARK -- set-mark 1

Getsockopt failed strangely: No such file or directory

Google said that there are few Kernel Modules

Cd/usr/src/linux-2.6.24
Make oldconfig
Make menuconfig

Select the MARK Option

Then compile these modules separately.

Make modules_prepare
Make M = net/netfilter

Net/netfilter is the relative path of the module, which can be queried Based on the. c file in the kernel source code directory.

The xt_MARK.ko file is generated.

Cp-f/usr/src/linux-2.6.24/net/netfilter/*. ko/lib/modules/2.6.24/kernel/net/netfilter/

The paths in the two locations must be consistent.

Depmod-

Then run iptables-I PREROUTING-t mangle-p tcp-s 192.168.1.0/24-j MARK -- set-mark 1.

Xt_MARK.ko is automatically mounted.

[Root @ localhost netfilter] # lsmod | grep xt
Xt_MARK 2560 1
Xt_tcpudp 3712 0
X_tables 14852 3 xt_MARK, ip_tables, xt_tcpudp
Ext3 123912 2
Jbd 47124 1 ext3