[SOLVED] Installing Iplist/Ipblock

michijo · 02-08-2012, 08:01 PM

I am interested in installing iplist/ipblock. It is available as source, but I am not sure I have resolved the dependencies properly. It starts to make but fails. I intended to build a package using this guide:

http://altctrlbackspace.blogspot.com...om-source.html

Looks like this when it fails to make:

Code:

g++ -O2 -Wall -Wextra -std=c++98 -D_REENTRANT -DNDEBUG -I include -c src/nfq.cc
src/nfq.cc: In static member function ‘static int nfq::nfq_hook::cb(nfq_q_handle*, nfgenmsg*, nfq_data*, void*)’:
src/nfq.cc:104: error: invalid conversion from ‘char**’ to ‘unsigned char**’
src/nfq.cc:104: error:   initializing argument 2 of ‘int nfq_get_payload(nfq_data*, unsigned char**)’
src/nfq.cc:125: warning: ‘int nfq_set_verdict_mark(nfq_q_handle*, u_int32_t, u_int32_t, u_int32_t, u_int32_t, const unsigned char*)’ is deprecated (declared at /usr/include/libnetfilter_queue/libnetfilter_queue.h:73)
src/nfq.cc:125: warning: ‘int nfq_set_verdict_mark(nfq_q_handle*, u_int32_t, u_int32_t, u_int32_t, u_int32_t, const unsigned char*)’ is deprecated (declared at /usr/include/libnetfilter_queue/libnetfilter_queue.h:73)
src/nfq.cc:132: warning: ‘int nfq_set_verdict_mark(nfq_q_handle*, u_int32_t, u_int32_t, u_int32_t, u_int32_t, const unsigned char*)’ is deprecated (declared at /usr/include/libnetfilter_queue/libnetfilter_queue.h:73)
src/nfq.cc:132: warning: ‘int nfq_set_verdict_mark(nfq_q_handle*, u_int32_t, u_int32_t, u_int32_t, u_int32_t, const unsigned char*)’ is deprecated (declared at /usr/include/libnetfilter_queue/libnetfilter_queue.h:73)
src/nfq.cc: In static member function ‘static void nfq::nfq_hook::print_pkt(std::string, int8_t, nfq_data*, nfqnl_msg_packet_hdr*)’:
src/nfq.cc:152: error: invalid conversion from ‘char**’ to ‘unsigned char**’
src/nfq.cc:152: error:   initializing argument 2 of ‘int nfq_get_payload(nfq_data*, unsigned char**)’
make: *** [nfq.o] Error 1

gnashley · 02-09-2012, 12:39 AM

That's not a dependency-related error. It's simply compiler errors from code which is no longer valid with your compiler version. Look for patches which fix the problem from fedora, LFS or ubuntu.
Found this on ARCH:
http://aur.archlinux.org/packages/ip.../iplist.tar.gz
It contains the patch you need(nfq.patch)

michijo · 02-09-2012, 01:46 PM

Quote:

Originally Posted by gnashley

That's not a dependency-related error. It's simply compiler errors from code which is no longer valid with your compiler version. Look for patches which fix the problem from fedora, LFS or ubuntu.
Found this on ARCH:
http://aur.archlinux.org/packages/ip.../iplist.tar.gz
It contains the patch you need(nfq.patch)

Okay, I have that patch now, but not sure how to apply it. I dropped it into the src folder of iplist, but this fails to make.

I suppose it's the fact that make returns the word "deprecated", that lets you know its related to outdated code, and to seek out a patch? I looked through the nfq.cc but saw no relative way to apply the contents of the patch.

Thanks for your help. I normally dont have trouble with software making and have installed other things like eclipse and swftools without problem.

michijo · 02-09-2012, 01:59 PM

Actually I just tried dropping the entire iplist.tar.gz with the patch in it in the main folder of the iplist I was trying to make, and it seems to have finished making. Now it returns only:

Quote:

make: Nothing to be done for `all'.

ponce · 02-09-2012, 02:25 PM

tried it now: you can also just substitute the original src/nfq.cc file with the one from the archlinux tar.gz.

or, to apply the patch, from the iplist source folder

Code:

patch src/nfq.cc /path/to/nfq.patch

(as you can read also in the PKGBUILD file

)

remember that you need these two dependencies: libnfnetlink and libnetfilter_queue.

michijo · 02-09-2012, 04:51 PM

it installs fine now, but running ipblock -g gets this error:

Code:

usr/sbin/ipblock: linio 420: LOG_IPTABLES: unreadable variable

michijo · 02-13-2012, 04:57 PM

I feel like iplist is running and installed, but that IPblock will not work. Ipblock returns a list of options when run as su:

Quote:

IPblock 0.29
Copyright (C) 2010 Serkan Sakar <uljanow@users.sourceforge.net>

Usage: ipblock [options]

Options:
-s start blocking
-d stop blocking
-r restart IPblock
-i restart iptables rules
-p restart iplist
-u update lists
-c convert lists to ipl format
-g start IPblock GUI
-l show status
-v show version and exit
-h show this help

So I feel like it is installed, but all of these options returns the same error:

Quote:

/usr/sbin/ipblock: line 420: LOG_IPTABLES: unreadable variable

I looked into this file, and in fact there is a variable on line 420 called used called LOG_IPTABLES. You know, I looked everywhere in this file, but no where is this variable declared, so maybe it cant read it, simply because it was never declared! I really dont know. I am fairly good at software compilation. I just upgraded and compiled the 3.2.5 kernel manually and enjoyed doing so.

This may be an ipblock problem. perhaps not for this forum.

ponce · 02-13-2012, 05:12 PM

Try with the slackware stock kernel, it can be you're missing some iptables modules in your custom one (just a guess).

michijo · 02-13-2012, 05:33 PM

Quote:

Originally Posted by ponce

Try with the slackware stock kernel, it can be you're missing some iptables modules in your custom one (just a guess).

or maybe when running "make oldconfig" I skipped some integral question related to iptables. I am reading up on iptables now to make sure I am not missing something. IPblock failed to work both before and after kernel upgrade. But iplist seems to. I thought it was something to do with java, jre, or some ipblock conf file. Could be a lot of things. I think it is iptables module as you say.

michijo · 02-13-2012, 10:48 PM

I am not concerned about this program so much! I just helped someone install it on Ubuntu the other day, as they felt they were being monitored for torrent downloads. Then I tried to install it on Slackware just for fun really. I dont need it. Slackware works for me 99% of the time. I managed to install Xmonad and many other things without trouble.