ricompilazione di iptables in sarge
Ciao a tutti,
Innanzitutto mi scuso per la lunghezza di questa email.
Sto cercando disperatamente di ricompilare iptables in sarge ma il make
va sempre in errore...
Premessa, il problema è che devo nattare qualche cacca di vpn ms che
senza pptp-contrack-nat (patch-o-matic) non funge con piu' utenti
dietro nat.
Sto usando un kernel 2.4.31 vanilla dove ho già applicato
con successo le patch per openswan, squashfs e grsecurity.
Purtroppo il p-o-m contenuto nel pacchetto sorgente
di iptables di sarge non mi applica le patch al kernel 2.4.31,
cosi' ho utilizzato una versione piu' recente di p-o-m e piu'
precisamente la patch-o-matic-ng-20050606.
Con questa versione al kernel viene correttamente applicata la
patch e, tra l'altro, riesco pure ad ottenere il deb del kernal
compilato...
Il problema è che devo anche ricompilare iptables in quanto ho
letto che devono andare di pari passo.
Bene quando tento di ricompilare iptables con le patch in questione
applicate ottengo prima di tutto una cosa strana:
[cut]
/usr/local/gtlinux/iptables/iptables-1.2.11/scripts/prep.sh -
patches/all/007-libipt_time_struct.patch
/usr/local/gtlinux/iptables/iptables-1.2.11/scripts/prep.sh -
patches/all/008-policy_printf.patch
Reversed (or previously applied) patch detected! Assume -R? [n] y
[/cut]
Io da nubbio ho risposto Yes altrimento con no si interrompe...
A seguire mi da cio':
[cut]
cc -O2 -Wall -Wunused
-I/usr/local/gtlinux/iptables/iptables-1.2.11/debian/build/kernel_profectio/include
-Iinclude/ -DIPTABLES_VERSION=\"1.2.11\" -D_UNKNOWN_KERNEL_POINTER_SIZE
-fPIC -o extensions/libipt_set_sh.o -c extensions/libipt_set.c
In file included from extensions/libipt_set.c:13:
ipset/libipt_set.h: In function `get_set_byname':
ipset/libipt_set.h:21: error: storage size of `req' isn't known
ipset/libipt_set.h:22: error: invalid application of `sizeof' to an
incomplete type
ipset/libipt_set.h:25: error: `IP_SET_OP_GETSET_BYNAME' undeclared
(first use in this function)
ipset/libipt_set.h:25: error: (Each undeclared identifier is reported
only once
ipset/libipt_set.h:25: error: for each function it appears in.)
ipset/libipt_set.h:33: error: invalid application of `sizeof' to an
incomplete type
ipset/libipt_set.h:37: error: invalid application of `sizeof' to an
incomplete type
ipset/libipt_set.h:42: error: structure has no member named `id'
ipset/libipt_set.h:21: warning: unused variable `req'
ipset/libipt_set.h: In function `get_set_byid':
ipset/libipt_set.h:47: error: storage size of `req' isn't known
ipset/libipt_set.h:48: error: invalid application of `sizeof' to an
incomplete type
ipset/libipt_set.h:51: error: `IP_SET_OP_GETSET_BYID' undeclared (first
use in this function)
ipset/libipt_set.h:58: error: invalid application of `sizeof' to an
incomplete type
ipset/libipt_set.h:62: error: invalid application of `sizeof' to an
incomplete type
ipset/libipt_set.h:47: warning: unused variable `req'
ipset/libipt_set.h: In function `parse_pool':
ipset/libipt_set.h:79: error: structure has no member named `set_level'
ipset/libipt_set.h:79: error: `IP_SET_SETIP_LEVELS' undeclared (first
use in this function)
ipset/libipt_set.h:82: error: structure has no member named `set_level'
ipset/libipt_set.h:84: error: structure has no member named `set_level'
ipset/libipt_set.h:90: error: structure has no member named `set_level'
ipset/libipt_set.h: In function `parse_ipflags':
ipset/libipt_set.h:105: error: structure has no member named `ip_level'
ipset/libipt_set.h:105: error: structure has no member named `set_level'
ipset/libipt_set.h:107: error: structure has no member named `ip_level'
ipset/libipt_set.h:107: error: `IP_SET_LEVELS' undeclared (first use in
this function)
ipset/libipt_set.h:109: error: structure has no member named `ip_level'
ipset/libipt_set.h:109: error: `IPSET_ADD_OVERWRITE' undeclared (first
use in this function)
ipset/libipt_set.h:115: error: structure has no member named `ip_level'
ipset/libipt_set.h:117: error: structure has no member named `ip_level'
ipset/libipt_set.h:123: error: structure has no member named `ip_level'
extensions/libipt_set.c: In function `init':
extensions/libipt_set.c:39: error: structure has no member named `match'
extensions/libipt_set.c: In function `parse':
extensions/libipt_set.c:53: error: structure has no member named `match'
extensions/libipt_set.c: In function `print_match':
extensions/libipt_set.c:95: error: structure has no member named `id'
extensions/libipt_set.c:96: error: structure has no member named `id'
extensions/libipt_set.c:101: error: structure has no member named
`set_level'
extensions/libipt_set.c:105: error: structure has no member named
`set_level'
extensions/libipt_set.c:105: error: structure has no member named `ip_level'
extensions/libipt_set.c:107: error: structure has no member named
`set_level'
extensions/libipt_set.c: In function `print':
extensions/libipt_set.c:121: error: structure has no member named `match'
extensions/libipt_set.c: In function `save':
extensions/libipt_set.c:131: error: structure has no member named `match'
make[1]: *** [extensions/libipt_set_sh.o] Error 1
make[1]: Leaving directory
`/usr/local/gtlinux/iptables/iptables-1.2.11/debian/build/iptables-1.2.11'
make: ***
[/usr/local/gtlinux/iptables/iptables-1.2.11/debian/build/stamp/build-stamp]
Error 2
testing:/usr/local/gtlinux/iptables/iptables-1.2.11#
[/cut]
Non so piu' che pesci prendere... Avete mica una idea/procedura/doc da
consigliarmi?
Grazie in anticipo.
Un saluto, Andrea.
Reply to: