ipt_connlimit.c module

ipt_connlimit.c module

[Martin Bene]

I've just tried to compile ipt_connlimit.c from current patch-o-matic
snapshot (20030710) on 2.4.21 kernel; 

compilation fails with an error (NF_ACCEPT undeclared):

/usr/src/linux-2.4.21/include/linux/netfilter_ipv4/ip_conntrack_core.h: In
function `ip_conntrack_confirm':
In file included from ipt_connlimit.c:18:
/usr/src/linux-2.4.21/include/linux/netfilter_ipv4/ip_conntrack_core.h:44:
`NF_ACCEPT' undeclared (first use in this function)
/usr/src/linux-2.4.21/include/linux/netfilter_ipv4/ip_conntrack_core.h:44:
(Each undeclared identifier is reported only once
/usr/src/linux-2.4.21/include/linux/netfilter_ipv4/ip_conntrack_core.h:44:
for each function it appears in.)
/usr/src/linux-2.4.21/include/linux/netfilter_ipv4/ip_conntrack_core.h:45:
warning: control reaches end of non-void function

Fix: additional include seems to be needed:

#include <linux/netfilter.h>

Bye, Martin

Re: ipt_connlimit.c module

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 704 bytes --]

On Fri, Jul 11, 2003 at 02:33:04PM +0200, Martin Bene wrote:
> I've just tried to compile ipt_connlimit.c from current patch-o-matic
> snapshot (20030710) on 2.4.21 kernel; 

thanks, I will add a patch to ip_conntrack_core.h to patch-o-matic.
It shouldn't be using NF_ACCEPT without including netfilter.h.


> Bye, Martin

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]