Help!! Iptables 1.2.7a: Make Error 1 at ip6t_mark.h

Help!! Iptables 1.2.7a: Make Error 1 at ip6t_mark.h

[Aniel Birdja]

[-- Attachment #1: Type: text/plain, Size: 728 bytes --]

Just installed a new LFS system with 2.4.19 kernel. 
But encounter problems when making iptables 1.2.7a:

During making dependencies Make exits with the following error:

Something wrong ... deleting dependencies
make: *** [ /usr/src/linux/include/linux/netfilter_ipv6/ip6t_mark.h] Error 1

When looking this file up it doesn't exist. 
But there is a file /usr/src/linux/include/linux/netfilter_ipv6/ip6t_MARK.h

Kernel is compiled with patches of patch-o-matic20020825. However 2 patches 
failed during patch process:
- Tos-oops-fix.patch
- ip-conntrack_protocol_destroy.patch

The following option is compiled into the kernel:
CONFIG_NETFILTER=y

Any ideas for the iptables and POM error?

Cheers,
Anil

[-- Attachment #2: Type: text/html, Size: 2034 bytes --]

Patch-o-matic newnat question

[Riho Randla]

[-- Attachment #1: Type: text/plain, Size: 1149 bytes --]

Hi,

I have to get to work pptp masquerading for multiple simultaneous vpn connections for w2k clients behind the iptables-firewall to a vpn server on the Internet. The latest patch allowing vpn connections from behind a nated firewall at all is netfilter_pptp_patch_2.4.19_rev1 by Brian Kuschak, and it works great but only for one connection at the same time to the same server (because of lack of the pptp Call ID support?). As I understood, the z-newnat16.patch would solve the problem, but I have not been able to apply this patch. Someone wrote in the list he could not do it neither. Is the problem related to the kernel version (the status says it's submitted for 2.4.20-pre1 but I use 2.4.19)? I have heard that someone tried to appliy the patch to the 2.4.20-pre7 had no success, too. How it could be done, and would it solve my problem at all?

Another question: I cannot supply some patches I could with an older kernel (2.4.18-3), ip_conntrack_protocol_destroy.patch and config-cleanup.patch
for example. Have someone met the same behavior? Without the ip_conntrack-staff  the nat-pptp would not work as module, would it?

Riho

[-- Attachment #2: Type: text/html, Size: 1862 bytes --]