LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 09-11-2006, 10:28 AM   #1
mjones490
Member
 
Registered: Sep 2005
Distribution: LFS
Posts: 60

Rep: Reputation: 22
Problems building iptables


I have a Slackware 10.2 install, and my kernel is version 2.6.17, built from source.

I've been playing around some with iptables, but I'm missing some extensions. So I loaded in the Slackware source for iptables and attempted to build it, telling it where my kernel source is as per INSTALL instructions.

The compile breaks when it encounters ipt_string.c. Seems there it's trying to use struct ipt_string_info, but that's nowhere to be found. I've monkeyed around with it a little bit by trying to write my own header file to define that struct going by how the .c file is using it, but I've not had much luck with that.

IMHO, I should not have to write this header myself (not that I could get that to work anyway. . . ). Has anyone else run across this? And if so, how did you get around it?

Thanks,
Mark
 
Old 09-11-2006, 01:40 PM   #2
mjones490
Member
 
Registered: Sep 2005
Distribution: LFS
Posts: 60

Original Poster
Rep: Reputation: 22
I think my problem is that I have to install and run Patch-O-Mattic and re-compile my kernel.

I will try that tonight.

Thanks,
Mark
 
Old 09-13-2006, 09:42 AM   #3
mjones490
Member
 
Registered: Sep 2005
Distribution: LFS
Posts: 60

Original Poster
Rep: Reputation: 22
Alright, I've download the latest iptables (3.3.5) and patch-o-mattic, applied the patch, re-compiled the kernel, compiled and installed iptables.

Now I'm having a problem that started out similar to this thread, where htb was having a problem with string matching and specifying the --algo parameter. So I handled that by specifying --algo bm. Now it gives me this error:

Code:
iptables: Unknown error 4294967295
I know this is not a whole lot of information to go by, but does anyone have any ideas as to what to do next?

Thanks,
Mark
 
Old 09-13-2006, 12:37 PM   #4
ITintuition
Member
 
Registered: Sep 2006
Location: The Pacific Northwest
Distribution: SUSE 10, Ubuntu, Fedora Core 6
Posts: 34

Rep: Reputation: 15
No Clue, what else have you tried?
 
Old 09-14-2006, 10:44 AM   #5
mjones490
Member
 
Registered: Sep 2005
Distribution: LFS
Posts: 60

Original Poster
Rep: Reputation: 22
Just an update IF anybody's following:

Did a little research and there saw some suggestions about using the raw table for string matching. Tried that, and got an error about the raw table not existing and to try insmoding the module.

So I looked at the kernel configuration, and decided to check ALL the iptables options to build into the kernel (not as modules. (I know, probably not a great idea. I'll go back and check just what I need later on). This old machine does not have a lot of processor power or memory, so it took several hours to compile the new kernel. I had to go to bed while it was still working.

Tonight, I'll install the new kernel and try again.

Thanks,
Mark
 
Old 09-15-2006, 09:09 AM   #6
mjones490
Member
 
Registered: Sep 2005
Distribution: LFS
Posts: 60

Original Poster
Rep: Reputation: 22
FYI, I installed my new kernel and retried the string match. Still got an error about the raw table not existing. So I tried putting it on the standard filter, specified --algo bm, gave it a nice hot cup of tea, and it worked!! I was able to stop a web page on my local server from coming up when the words "go away" were anywhere on the page, while other pages showed up fine. When I removed the filter, the "go away" page worked again!

W00t!!1!

My next personal task is to fix ipt_string.c to default to the bm algorithm, so that it does not have to be specified, as apparently was the case in earlier versions of iptables.

Thanks,
Mark
 
  


Reply

Tags
iptables, slackware, source


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Building a GUI for iptables chingyenccy Linux - Newbie 1 01-19-2005 07:49 AM
Need Help In Building a Web-based Firewall Configuration Tool for Linux(RH9-iptables) eason Linux - General 1 02-21-2004 05:34 PM
Building Exim 4.30 problems! astott Linux - Networking 0 02-17-2004 08:56 PM
Problems building glibc-2.3.2 CodeRed Linux - Software 0 07-10-2003 08:45 AM
Problems building XFree86 ugenn Linux - Software 1 06-12-2003 04:24 PM


All times are GMT -5. The time now is 10:55 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration