| 1 |
Hi Daniel |
| 2 |
|
| 3 |
Daniel Iliev wrote on 01/04/07 19:10: |
| 4 |
>>> My question: what is the best way get this iptables module working w/o |
| 5 |
>>> diverting too much from the official Gentoo installation. I mean the |
| 6 |
>>> normal way is to use patch-o-matic to patch iptables source and vanilla |
| 7 |
>>> kernel source, then build and install. I have the feeling that it is not |
| 8 |
>>> exactly the right thing to with Gentoo. |
| 9 |
|
| 10 |
>> cd /usr/src |
| 11 |
>> svn co https://svn.netfilter.org/netfilter/trunk/patch-o-matic-ng |
| 12 |
>> svn co https://svn.netfilter.org/netfilter/trunk/iptables |
| 13 |
>> cd patch-o-matic-ng |
| 14 |
>> ./runme extra |
| 15 |
>> cd /usr/src/linux |
| 16 |
>> make menuconfig |
| 17 |
>> make && make modules_install && make install |
| 18 |
>> make sure you have USE "extensions" in your make.conf |
| 19 |
>> emerge iptables |
| 20 |
|
| 21 |
> This patch appears to be incompatible with gentoo-sources or I'm doing |
| 22 |
> something wrong. After patching the module "TARPIT" appears in the |
| 23 |
> kernel configuration and I mark it to get built as a module [M]. Then: |
| 24 |
> ====================== |
| 25 |
> make all modules_install install |
| 26 |
> scripts/kconfig/conf -s arch/i386/Kconfig |
| 27 |
> CHK include/linux/version.h |
| 28 |
> CHK include/linux/utsrelease.h |
| 29 |
> CHK include/linux/compile.h |
| 30 |
> GZIP kernel/config_data.gz |
| 31 |
> IKCFG kernel/config_data.h |
| 32 |
> CC kernel/configs.o |
| 33 |
> LD kernel/built-in.o |
| 34 |
> CC [M] net/ipv4/netfilter/ipt_TARPIT.o |
| 35 |
> net/ipv4/netfilter/ipt_TARPIT.c: In function ‘ip_direct_send’: |
| 36 |
> net/ipv4/netfilter/ipt_TARPIT.c:65: warning: implicit declaration of |
| 37 |
> function ‘neigh_hh_output’ |
| 38 |
> ---snip---- |
| 39 |
> Kernel: arch/i386/boot/bzImage is ready (#2) |
| 40 |
> Building modules, stage 2. |
| 41 |
> MODPOST 159 modules |
| 42 |
> WARNING: "neigh_hh_output" [net/ipv4/netfilter/ipt_TARPIT.ko] undefined! |
| 43 |
> make[1]: *** [__modpost] Error 1 |
| 44 |
> make: *** [modules] Error 2 |
| 45 |
> ====================== |
| 46 |
> So, I'm still looking for advices. |
| 47 |
|
| 48 |
Did the patches apply OK? |
| 49 |
|
| 50 |
Did you do: |
| 51 |
|
| 52 |
cd /usr/src/iptables |
| 53 |
svn update |
| 54 |
cd /usr/src/patch-o-matic-ng |
| 55 |
svn update |
| 56 |
|
| 57 |
.. before updating your kernel? |
| 58 |
|
| 59 |
What kernel are you running? |
| 60 |
|
| 61 |
Cheers, Dave |
| 62 |
-- |
| 63 |
gentoo-user@g.o mailing list |
Archives