net/netfilter/nf_nat.h header instalation

net/netfilter/nf_nat.h header instalation

[Peter Volkov]

Hi. Could you suggest solution for following problem:

miniupnpd [1] uses net/netfilter/nf_nat.h header and fails to build as
normally this header is not installed by kernel during header. But is
this correct?

As I found, iptables itself copies this kernel headers and bundles
together with sources for reasons outlined in [3]. Now for miniupnpd
distributions started to install  net/netfilter/*.h [4] [5]. I'm not
opposed to install this headers in Gentoo too, bug if this is user space
header shouldn't kernel install it?

[1] http://miniupnp.free.fr/files
[2] http://miniupnp.tuxfamily.org/forum/viewtopic.php?t=771&start=15
[3]
http://comments.gmane.org/gmane.comp.security.firewalls.netfilter.devel/36623
[4] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=541979
[5] https://qa.mandriva.com/show_bug.cgi?id=58007

--
Peter.

Re: net/netfilter/nf_nat.h header instalation

[Patrick McHardy]

On 29.07.2011 11:37, Peter Volkov wrote:
> Hi. Could you suggest solution for following problem:
> 
> miniupnpd [1] uses net/netfilter/nf_nat.h header and fails to build as
> normally this header is not installed by kernel during header. But is
> this correct?
> 
> As I found, iptables itself copies this kernel headers and bundles
> together with sources for reasons outlined in [3]. Now for miniupnpd
> distributions started to install  net/netfilter/*.h [4] [5]. I'm not
> opposed to install this headers in Gentoo too, bug if this is user space
> header shouldn't kernel install it?

iptables is actually wrong in copying that file, the userspace portions
such as nf_nat_manip_types and nf_nat_*range need to be moved to a new
file under include/linux/netfilter_ipv4/ which is installed and used
by userspace.