Can't get ipset to compile - kernel-2.6.10, iptables-1.3.0...

Can't get ipset to compile - kernel-2.6.10, iptables-1.3.0...

[henry]

After the advice I got on using ipset for long lists of networks for ban 
lists, I set out to install it. I followed the instructions on the ipset 
webpage: Downloaded the latest kernel from kernel.org (2.6.10) 
downloaded the latest iptables (1.3.0) and downloaded the 
patch-o-matic-ng from the ipset link (patch-o-matic-ng-20041206.tar.bz2)

I ran ./runme set and it installed the patch just fine. But when I try 
and compile the kernel, this is what is happening:

<...>
   CC [M]  net/ipv4/netfilter/ipt_comment.o
   CC [M]  net/ipv4/netfilter/ip_nat_snmp_basic.o
   CC [M]  net/ipv4/netfilter/ipt_CONNMARK.o
   CC [M]  net/ipv4/netfilter/ipt_NOTRACK.o
   CC [M]  net/ipv4/netfilter/ipt_SET.o
   CC [M]  net/ipv4/netfilter/ip_set.o
net/ipv4/netfilter/ip_set.c: In function `ip_set_find_in_hash':
net/ipv4/netfilter/ip_set.c:86: error: structure has no member named 
`read_locked_map'
net/ipv4/netfilter/ip_set.c:86: error: structure has no member named 
`write_locked_map'
net/ipv4/netfilter/ip_set.c: In function `__set_hash_del':
net/ipv4/netfilter/ip_set.c:102: error: structure has no member named 
`write_locked_map'
net/ipv4/netfilter/ip_set.c: In function `ip_set_unbindip':
net/ipv4/netfilter/ip_set.c:634: error: structure has no member named 
`write_locked_map'
net/ipv4/netfilter/ip_set.c:662: error: structure has no member named 
`write_locked_map'
net/ipv4/netfilter/ip_set.c: In function `ip_set_destroy_set':
net/ipv4/netfilter/ip_set.c:894: error: structure has no member named 
`write_locked_map'
make[3]: *** [net/ipv4/netfilter/ip_set.o] Error 1
make[2]: *** [net/ipv4/netfilter] Error 2
make[1]: *** [net/ipv4] Error 2
make: *** [net] Error 2


I have tried compiling the ipset functions both into the kernel and as 
modules. What am I doing wrong?

Re: Can't get ipset to compile - kernel-2.6.10, iptables-1.3.0...

[Jozsef Kadlecsik]

On Fri, 14 Jan 2005, henry wrote:

> After the advice I got on using ipset for long lists of networks for ban
> lists, I set out to install it. I followed the instructions on the ipset
> webpage: Downloaded the latest kernel from kernel.org (2.6.10)
> downloaded the latest iptables (1.3.0) and downloaded the
> patch-o-matic-ng from the ipset link (patch-o-matic-ng-20041206.tar.bz2)
>
> I ran ./runme set and it installed the patch just fine. But when I try
> and compile the kernel, this is what is happening:
>
> <...>
>    CC [M]  net/ipv4/netfilter/ipt_comment.o
>    CC [M]  net/ipv4/netfilter/ip_nat_snmp_basic.o
>    CC [M]  net/ipv4/netfilter/ipt_CONNMARK.o
>    CC [M]  net/ipv4/netfilter/ipt_NOTRACK.o
>    CC [M]  net/ipv4/netfilter/ipt_SET.o
>    CC [M]  net/ipv4/netfilter/ip_set.o
> net/ipv4/netfilter/ip_set.c: In function `ip_set_find_in_hash':
> net/ipv4/netfilter/ip_set.c:86: error: structure has no member named
> `read_locked_map'

As a quick fix, disable debugging netfilter in the kernel configuration.
(Non-debugged definition of lock mixed with debugging instructions.)

I'll commit the fixed version in svn and update the webpage on Tuesday.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary