Problem with apply patch connlimit to 2.6.10 (debian 2.6.10-6)

Problem with apply patch connlimit to 2.6.10 (debian 2.6.10-6)

[Alexander Samad]

[-- Attachment #1: Type: text/plain, Size: 1498 bytes --]

Hi


I have been trying to apply the connlimit patch to a debian kernel
source package.  These are the other patches I apply

policy TARPIT iprange raw dstlimit ROUTE time IPMARK CLASSIFY
dropped-table pool realm TCPLAG ULOG account connlimit nf_conntrack nth
owner-socketlookup ownercmd conntrack-cacheline-opt

But I this error when I try and compile the kernel 

  CC [M]  net/ipv4/netfilter/ipt_connlimit.o
net/ipv4/netfilter/ipt_connlimit.c: In function `count_them':
net/ipv4/netfilter/ipt_connlimit.c:100: error: structure has no member
named `infos'
net/ipv4/netfilter/ipt_connlimit.c:107: error: structure has no member
named `infos'
make[5]: *** [net/ipv4/netfilter/ipt_connlimit.o] Error 1
make[4]: *** [net/ipv4/netfilter] Error 2
make[3]: *** [net/ipv4] Error 2
make[2]: *** [net] Error 2
make[2]: Leaving directory
`/mnt/space0/alex/src/kernel/debian/kernel-source-2.6.10.wrk'
make[1]: *** [stamp-build] Error 2
make[1]: Leaving directory
`/mnt/space0/alex/src/kernel/debian/kernel-source-2.6.10.wrk'
make: *** [kernel] Error 2


I have had a look in include/linux/netfilter_ipv4/ip_conntrack.h  and it
seems like the structure has gone  and I am not sure what else I need to
apply to make it compile.

I have had similiar problems with ipv6 REJECT patch, but I have built a
linux/include/linux/netfilter_ipv6/ip6t_REJECT.h that can be patched
(but there might be stuff missing from there as well!

and suggestions what I can do

Thanks
Alex

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: Problem with apply patch connlimit to 2.6.10 (debian 2.6.10-6)

[Alexander Samad]

[-- Attachment #1: Type: text/plain, Size: 1872 bytes --]

On Sat, Mar 26, 2005 at 10:43:32AM +1100, Alexander Samad wrote:
> Hi
> 
> 
> I have been trying to apply the connlimit patch to a debian kernel
> source package.  These are the other patches I apply
> 
> policy TARPIT iprange raw dstlimit ROUTE time IPMARK CLASSIFY
> dropped-table pool realm TCPLAG ULOG account connlimit nf_conntrack nth
> owner-socketlookup ownercmd conntrack-cacheline-opt
> 
> But I this error when I try and compile the kernel 
> 
>   CC [M]  net/ipv4/netfilter/ipt_connlimit.o
> net/ipv4/netfilter/ipt_connlimit.c: In function `count_them':
> net/ipv4/netfilter/ipt_connlimit.c:100: error: structure has no member
> named `infos'
> net/ipv4/netfilter/ipt_connlimit.c:107: error: structure has no member
> named `infos'
> make[5]: *** [net/ipv4/netfilter/ipt_connlimit.o] Error 1
> make[4]: *** [net/ipv4/netfilter] Error 2
> make[3]: *** [net/ipv4] Error 2
> make[2]: *** [net] Error 2
> make[2]: Leaving directory
> `/mnt/space0/alex/src/kernel/debian/kernel-source-2.6.10.wrk'
> make[1]: *** [stamp-build] Error 2
> make[1]: Leaving directory
> `/mnt/space0/alex/src/kernel/debian/kernel-source-2.6.10.wrk'
> make: *** [kernel] Error 2
> 
> 
> I have had a look in include/linux/netfilter_ipv4/ip_conntrack.h  and it
> seems like the structure has gone  and I am not sure what else I need to
> apply to make it compile.

I noticed on bugszilla there is an open bug about connlimit not
compiling on 2.6.11 (Bugzilla Bug 317) and the patch seems to remove any
access to infos !  Should i be using the patch attached to this bugzilla
?

> 
> I have had similiar problems with ipv6 REJECT patch, but I have built a
> linux/include/linux/netfilter_ipv6/ip6t_REJECT.h that can be patched
> (but there might be stuff missing from there as well!
> 
> and suggestions what I can do
> 
> Thanks
> Alex



[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: Problem with apply patch connlimit to 2.6.10 (debian 2.6.10-6)

[Phil Oester]

On Sat, Mar 26, 2005 at 11:15:04AM +1100, Alexander Samad wrote:
> > I have had a look in include/linux/netfilter_ipv4/ip_conntrack.h  and it
> > seems like the structure has gone  and I am not sure what else I need to
> > apply to make it compile.
> 
> I noticed on bugszilla there is an open bug about connlimit not
> compiling on 2.6.11 (Bugzilla Bug 317) and the patch seems to remove any
> access to infos !  Should i be using the patch attached to this bugzilla

Yes, although 317 is a dupe of 268.  The fix is already applied to the 
2.6.11 branch of POM-NG.

Which raises the question (Harald?) - can we now make the 2.6.11 branch
the primary one?

Phil

Re: Problem with apply patch connlimit to 2.6.10 (debian 2.6.10-6)

[Alexander Samad]

[-- Attachment #1: Type: text/plain, Size: 886 bytes --]

On Fri, Mar 25, 2005 at 05:17:42PM -0800, Phil Oester wrote:
> On Sat, Mar 26, 2005 at 11:15:04AM +1100, Alexander Samad wrote:
> > > I have had a look in include/linux/netfilter_ipv4/ip_conntrack.h  and it
> > > seems like the structure has gone  and I am not sure what else I need to
> > > apply to make it compile.
> > 
> > I noticed on bugszilla there is an open bug about connlimit not
> > compiling on 2.6.11 (Bugzilla Bug 317) and the patch seems to remove any
> > access to infos !  Should i be using the patch attached to this bugzilla
> 
> Yes, although 317 is a dupe of 268.  The fix is already applied to the 
> 2.6.11 branch of POM-NG.
So does this mean I have to wait for the debian 2.6.11 source package,
as the current one is 2.6.10-6

> 
> Which raises the question (Harald?) - can we now make the 2.6.11 branch
> the primary one?
> 
> Phil
> 
> 

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: Problem with apply patch connlimit to 2.6.10 (debian 2.6.10-6)

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1289 bytes --]

On Fri, Mar 25, 2005 at 05:17:42PM -0800, Phil Oester wrote:
> On Sat, Mar 26, 2005 at 11:15:04AM +1100, Alexander Samad wrote:
> > > I have had a look in include/linux/netfilter_ipv4/ip_conntrack.h  and it
> > > seems like the structure has gone  and I am not sure what else I need to
> > > apply to make it compile.
> > 
> > I noticed on bugszilla there is an open bug about connlimit not
> > compiling on 2.6.11 (Bugzilla Bug 317) and the patch seems to remove any
> > access to infos !  Should i be using the patch attached to this bugzilla
> 
> Yes, although 317 is a dupe of 268.  The fix is already applied to the 
> 2.6.11 branch of POM-NG.
> 
> Which raises the question (Harald?) - can we now make the 2.6.11 branch
> the primary one?

no, we add '2.6.11' directories to the main branch. In fact, 'connlimit'
has such a directory now.  Am I right that the problem is fixed in
pom-trunk?

-- 
- Harald Welte <laforge@netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]