tftp conntrack

tftp conntrack

[Skull]

Hi all,
I've just downloaded the tftp-conntrack patch, but seems i'm not good 
enough to let it patch correctly for me... :-)
Is there anybody who already correctly applied it and could tell me what 
to put care on?

thx...

-- 
Emanuele "SKULL" Balla
----------------------------------------------------------------------
"How should I know if it works?  That's what beta testers are for. I 
only coded it." (Attributed to Linus Torvalds, somewhere in a posting)

RE: tftp conntrack

[Sneppe Filip]

[-- Attachment #1: Type: text/plain, Size: 536 bytes --]

Skull [mailto:skull@skullkrusher.net] wrote:

>Hi all,
>I've just downloaded the tftp-conntrack patch, but seems i'm not good 
>enough to let it patch correctly for me... :-)
>Is there anybody who already correctly applied it and could tell me what 
>to put care on?

Hi Emanuele,

the tftp conntracker, like all conntrackers nowadays requires that
the kernel is patched for newnat support.

Did you apply the necessary patch(es) for newnat before applying the
tftp connectrack helper ?

Kind regards,
Filip






[-- Attachment #2: Type: text/html, Size: 1041 bytes --]

Re: tftp conntrack

[Skull]

Sneppe Filip wrote:

 > the tftp conntracker, like all conntrackers nowadays requires that
 > the kernel is patched for newnat support.
 >
 > Did you apply the necessary patch(es) for newnat before applying the
 > tftp connectrack helper ?

Yes... To avoid any kind of misunderstanding during the configuration, 
this is what I did:
- I downloaded a 2.4.18-vanilla tarball
- I've checked out thru CVS the entire netfilter/userspace repository 
directory
- I launched the make patch-o-matic

It obviously made a lot of questions for each patch to install, and it 
didn't find anything wrong during the whole process.
The only problem happens when it tries to install the tftp-conntrack 
helper (that was what I really needed from all this thing... damn...): 
it comes out with:

Testing patch extra/tftp-conntrack-nat.patch...
    Placed new Config.in line
    Placed new Config.in line
    Placed new Configure.help entry
    Placed new Makefile line
Could not find place to slot in Makefile line
TEST FAILED: patch NOT applied.

[Press enter to continue]

And this is not such a verbose comment if I need to understand where the 
problem is :-)

Thanx 4 all...



-- 
Emanuele "SKULL" Balla
----------------------------------------------------------------------
"How should I know if it works?  That's what beta testers are for. I
only coded it." (Attributed to Linus Torvalds, somewhere in a posting)

Re: tftp conntrack

[Skull]

Skull wrote:
> 
> Yes... To avoid any kind of misunderstanding during the configuration, 
> this is what I did:
> - I downloaded a 2.4.18-vanilla tarball
> - I've checked out thru CVS the entire netfilter/userspace repository 
> directory
> - I launched the make patch-o-matic

Oh, I made a mistake: tftp conntrack helper doesn't install because of
the lack of the newnat patch, which refuses to install by itself because:

Testing patch pending/0-newnat13.patch...
Failed to patch copy of /usr/src/linux
TEST FAILED: patch NOT applied.

hmmm not so exxaustive, huh?

Need to study why it fails.. :-P

Just a question: when launching patch-o-matic how could I choose what to 
install?
Only reading what the it says about the single packets or is it present 
somewhere
a list of dependencies for patch installation?

thx


-- 
Emanuele "SKULL" Balla
----------------------------------------------------------------------
"How should I know if it works?  That's what beta testers are for. I
only coded it." (Attributed to Linus Torvalds, somewhere in a posting)

RE: tftp conntrack

[Sneppe Filip]

[-- Attachment #1: Type: text/plain, Size: 1653 bytes --]

Hi,

Skull [mailto:skull@skullkrusher.net] wrote:
>
>Yes... To avoid any kind of misunderstanding during the configuration, 
>this is what I did:
>- I downloaded a 2.4.18-vanilla tarball
>- I've checked out thru CVS the entire netfilter/userspace repository 
>directory
>- I launched the make patch-o-matic
>

Just out of curiosity:
Can you tell me how you applied newnat then without taking extra
steps? I just tried 2.4.18 and cvs netfilter, and newnat doesn't
apply to 2.4.18 anymore from just running patch-o-matic.

>The only problem happens when it tries to install the tftp-conntrack 
>helper (that was what I really needed from all this thing... damn...): 
>it comes out with:
>
>Testing patch extra/tftp-conntrack-nat.patch...
>    Placed new Config.in line
>    Placed new Config.in line
>    Placed new Configure.help entry
>    Placed new Makefile line
>Could not find place to slot in Makefile line
>TEST FAILED: patch NOT applied.
>
>
>And this is not such a verbose comment if I need to understand where the 
>problem is :-)
>

Well, it does show you something useful: it fails on the Makefile,
which is fairly trivial to fix manually. My guess is that you've also 
applied patches for additional connection tracking helpers.

Why don't you force to apply the patch anyway with patch-o-matic, and
then take a look at the reject file 
(/path/to/linux/src/net/ipv4/netfilter/Makefile.rej) and manually
adjust the Makefile from it. 

You really only need to add:

obj-$(CONFIG_IP_NF_TFTP) += ip_conntrack_tftp.o
obj-$(CONFIG_IP_NF_NAT_TFTP) += ip_nat_tftp.o

somewhere :-)

Regards,
Filip

[-- Attachment #2: Type: text/html, Size: 2385 bytes --]