On 11/11/19 7:57 AM, Bill Shirley wrote: > Conditional match may be a function of the kernel's xtables addon. I > always install it > to get GeoIP match support although it taints the kernel. I've run it > for years without > any problems. > > Installation may be a simple as rebooting after running: > dnf install akmod-xtables-addons > > In the past, sometimes I've had to run "depmod -a" after rebooting. > Oh, you'll need the rpmfusion repo to install. > > Here's the rpms pulled in: > [0:root@apslinux ~]$ rpm -qa | grep -e kmod -e xtables | sort > akmods-0.5.6-15.fc28.noarch > akmod-xtables-addons-3.0-1.fc28.x86_64 > kmod-25-2.fc28.x86_64 > kmod-libs-25-2.fc28.x86_64 > kmodtool-1-29.fc28.noarch > kmod-xtables-addons-4.16.14-300.fc28.x86_64-3.0-1.fc28.x86_64 > kmod-xtables-addons-4.16.15-300.fc28.x86_64-3.0-1.fc28.x86_64 > kmod-xtables-addons-4.16.16-300.fc28.x86_64-3.0-1.fc28.x86_64 > kmod-xtables-addons-4.17.19-200.fc28.x86_64-3.0-1.fc28.x86_64 > kmod-xtables-addons-4.17.5-200.fc28.x86_64-3.0-1.fc28.x86_64 > xtables-addons-3.0-1.fc28.x86_64 > > > Bill
Enjoy it while you can. xtables-addons features are no longer available on Debian Stretch when using the new nftables backend. One must use the legacy iptables backend to get those features. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
