iptables compile trouble

iptables compile trouble

[L.Kremkow]

Hi,

I'm trying to compile iptables-1.2.6a on Linux 2.4.18 and it keeps bombing
out on me with the following error messages:
Extensions found:
cc -O2 -Wall -Wunused -I/usr/src/linux/include -Iinclude/
-DNETFILTER_VERSION=\"1.2.6a\"  -DIP6T_LIB_DIR=\"/usr/local/lib/iptables\"
-c -o ip6tables.o ip6tables.c
ip6tables.c: In function `host_to_addr':
ip6tables.c:496: storage size of `hints' isn't known
ip6tables.c:502: `AI_CANONNAME' undeclared (first use in this function)
ip6tables.c:502: (Each undeclared identifier is reported only once
ip6tables.c:502: for each function it appears in.)
ip6tables.c:509: warning: implicit declaration of function `getaddrinfo'
ip6tables.c:515: dereferencing pointer to incomplete type
ip6tables.c:516: dereferencing pointer to incomplete type
ip6tables.c:526: dereferencing pointer to incomplete type
ip6tables.c:527: warning: implicit declaration of function `freeaddrinfo'
ip6tables.c:496: warning: unused variable `hints'
ip6tables.c: In function `addr_to_host':
ip6tables.c:540: `NI_MAXHOST' undeclared (first use in this function)
ip6tables.c:546: warning: implicit declaration of function `getnameinfo'
ip6tables.c:540: warning: unused variable `hostname'
make: *** [ip6tables.o] Error 1

Now, I don't understand why it would want to do anything with IPv6- I
don't use it. I recompiled the kernel a few times, and even included IPv6
netfilter stuff in the kernel, but it was still gives me the same error.

I looked at the makefile and set DO_IP6=0 regardless to get it to not do
it, but I still get this error message. I've googled to see if other
people have seen this before, but haven't found anything related.

I'm not sure to what extend bind could have interfered, but I tried
including it's libraries, which still didn't yield any results.

At this point I'm stuck. Any help would be appreciated.
Thanks,,
L.Kremkow

Re: iptables compile trouble

[Tony Earnshaw]

[-- Attachment #1: Type: text/plain, Size: 972 bytes --]

ons, 2002-06-05 kl. 20:29 skrev L.Kremkow:

> At this point I'm stuck. Any help would be appreciated.

Linux, you say. What distro?

Are you trying to compile a distro-specific kernel, or kernel.org kernel
code?

If it's a distro kernel, has it put the source code where it's supposed
to be?

How did you configure the kernel:
- 'make config',
- 'make menuconfig'
- 'make xconfig'?

Does it comprise Netfilter support and have you included this?

Have you run 'make pending-patches', or something else?

Did you do that before compiling your kernel?

What version of gcc are you using?

Why would you think everyone on this list is clairvoyant?

Tony

-- 

Tony Earnshaw

e-post:		tonni@billy.demon.nl
www:		http://www.billy.demon.nl
gpg public key:	http://www.billy.demon.nl/tonni.armor

Telefoon:	(+31) (0)172 530428
Mobiel:		(+31) (0)6 51153356

GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
3BE7B981



[-- Attachment #2: Dette er en digitalt signert meldingsdel --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: iptables compile trouble

[Leif Kremkow]

On 5 Jun 2002, Tony Earnshaw wrote:
> ons, 2002-06-05 kl. 20:29 skrev L.Kremkow:
> Linux, you say. What distro?

I would not like to call what I have a distro... It's based on a SuSE 7.0
install, where I replaced nearly everything I use (kernel and it's
dependencies, make, X, SSL, etc.). I don't use any of the distro specific
stuff, such as YaST.

> Are you trying to compile a distro-specific kernel, or kernel.org kernel
> code?
kernel.org

> If it's a distro kernel, has it put the source code where it's supposed
> to be?
Not applicable.

> How did you configure the kernel:
> - 'make config',
Never.
> - 'make menuconfig'
Usually.
> - 'make xconfig'?
As of late and in this case.

> Does it comprise Netfilter support and have you included this?
It's kernel.org based, so it should be included. As you might have seen
mentioned in the mail, I included netfilter for IPv4 and IPv6, mostly as
modules.

> Have you run 'make pending-patches', or something else?
Yes, as per INSTALL:
make pending-patches KERNEL_DIR=/usr/src/linux/

> Did you do that before compiling your kernel?
Yes.

> What version of gcc are you using?
2.95.2

Regards,,
Leif

Re: iptables compile trouble

[Andras Kis-Szabo]

Hi,

The
> ip6tables.c:502: `AI_CANONNAME' undeclared (first use in this function)
> ip6tables.c:509: warning: implicit declaration of function `getaddrinfo'
> ip6tables.c:527: warning: implicit declaration of function `freeaddrinfo'
> ip6tables.c:540: `NI_MAXHOST' undeclared (first use in this function)
are definied in the /usr/include/netdb.h, which is included.
These definitions depend on the __USE_POSIX define. (-D__USE_POSIX)

Regards,

	kisza
-- 
    Andras Kis-Szabo       Security Development, Design and Audit
-------------------------/        Zorp, NetFilter and IPv6
 kisza@SecurityAudit.hu /-----Member of the BUTE-MIS-SEARCHlab------>

Re: iptables compile trouble

[Tony Earnshaw]

[-- Attachment #1: Type: text/plain, Size: 2080 bytes --]

ons, 2002-06-05 kl. 22:03 skrev Leif Kremkow:

> I would not like to call what I have a distro... It's based on a SuSE 7.0
> install, where I replaced nearly everything I use (kernel and it's
> dependencies, make, X, SSL, etc.). I don't use any of the distro specific
> stuff, such as YaST.

O.k. That's the same as me. I'm Red Hat 7.2, but there isn't much left
of the important networking stuff.

I don't have any trouble with the iptables compilation, as don't most
people on this list.

At this point, I have to confess to having misunderstood your original
posting. In fact, you've done a kernel compile with patched Netfilter
code, and have a new kernel with its own associated and your iptables
modules. The latter should now be in

/lib/modules/2.4.18//kernel/net/ipv4/netfilter .

Are they? Can you modprobe/insmod and rmmod them?

If so, your problem's nothing to do with the kernel, rather with the
userspace utilities.

If so, leave the kernel as it is, or recompile it without IPV6, which
you've said you don't need. Obviously you need the necessary iptables
patch-o-matic patches.

The following is an orrible workaround and shouldn't be necessary. It
works for me, but might not for you. All the ipv6 stuff comes at the end
of the make.

vi the iptables userspace top Makefile in your 1.2.6a compile directory
(the others don't need it). Instead of making DO_IP6=0, comment it out:
#DO_IP6=0 and 'make clean', 'make'. If you want to see afterwards what
it's done, do:

'make > /tmpdir 2>&1' and 'more'/'less' the resulting logfile
afterwards. For me it compiles cleanly cuts out all the ipv6 utilities.
For you it should do the same.

I'm tired and I'm going to bed. Night comes early in Holland :-)

Best,

Tony







-- 

Tony Earnshaw

e-post:		tonni@billy.demon.nl
www:		http://www.billy.demon.nl
gpg public key:	http://www.billy.demon.nl/tonni.armor

Telefoon:	(+31) (0)172 530428
Mobiel:		(+31) (0)6 51153356

GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
3BE7B981



[-- Attachment #2: Dette er en digitalt signert meldingsdel --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: iptables compile trouble

[Andras Kis-Szabo]

Hi,

The
> ip6tables.c:502: `AI_CANONNAME' undeclared (first use in this function)
> ip6tables.c:509: warning: implicit declaration of function `getaddrinfo'
> ip6tables.c:527: warning: implicit declaration of function `freeaddrinfo'
> ip6tables.c:540: `NI_MAXHOST' undeclared (first use in this function)
are definied in the /usr/include/netdb.h, which is included.
These definitions depend on the __USE_POSIX define. (-D__USE_POSIX)

Regards,

	kisza
-- 
    Andras Kis-Szabo       Security Development, Design and Audit
-------------------------/        Zorp, NetFilter and IPv6
 kisza@SecurityAudit.hu /-----Member of the BUTE-MIS-SEARCHlab------>

Re: iptables compile trouble

[Tony Earnshaw]

[-- Attachment #1: Type: text/plain, Size: 1268 bytes --]

tor, 2002-06-06 kl. 00:59 skrev Andras Kis-Szabo:

> The
> > ip6tables.c:502: `AI_CANONNAME' undeclared (first use in this function)
> > ip6tables.c:509: warning: implicit declaration of function `getaddrinfo'
> > ip6tables.c:527: warning: implicit declaration of function `freeaddrinfo'
> > ip6tables.c:540: `NI_MAXHOST' undeclared (first use in this function)
> are definied in the /usr/include/netdb.h, which is included.
> These definitions depend on the __USE_POSIX define. (-D__USE_POSIX)

In which case Leif would do best to have a look at his
glibc/glibc-developer version and install that which suits his compiler
best.

I switch between gcc3.04 (standard for most compiles, including kernels)
and gcc2.96 (Red Hat bastardization, should have been gcc2.95) and both
use the same /usr/include/netdb.h. This comes from glibc-devel-2.2.4-24,
a Red Hat update.

He should cut out the horrible workaround that I gave in my last post.

Best,

Tony

-- 

Tony Earnshaw

e-post:		tonni@billy.demon.nl
www:		http://www.billy.demon.nl
gpg public key:	http://www.billy.demon.nl/tonni.armor

Telefoon:	(+31) (0)172 530428
Mobiel:		(+31) (0)6 51153356

GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
3BE7B981



[-- Attachment #2: Dette er en digitalt signert meldingsdel --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: iptables compile trouble

[L.Kremkow]

On 5 Jun 2002, Andras Kis-Szabo wrote:
> The
> > ip6tables.c:502: `AI_CANONNAME' undeclared (first use in this function)
> > ip6tables.c:540: `NI_MAXHOST' undeclared (first use in this function)
> are definied in the /usr/include/netdb.h, which is included.

Thanks- that was it. I had a whole bunch of netdb.h files all over my
system. Once I figured out which was the "right" one and what it's "right"
place was, everything was fine.

Thanks for the help.

,,
LKremkow