Where is CONNMARK extension kernel 2.4.32?

Where is CONNMARK extension kernel 2.4.32?

[Samuel Díaz García]

Hi all.

I have troubles with CONNMARK extensions into kernel 2.4.32.

The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng 
and I cant see CONNMARK extension into the pom-ng options and isn't in 
kernel config.

Perhaps could be that any patch I applied before (IMQ, Layer7filter, 
etc...) had broken it. I had compiled kernel, iptables (1.3.4) and many 
pom-ng patches. And when I test some scripts that uses CONNMARK without 
success (chain/tarjet error).
I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is the 
reason why I can view "iptables -j CONNMARK --help" help text, but I 
can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and isn't 
compiled into the kernel (cat /usr/src/linux/.config | grep "CONNMARK") 
doesn't show me anythink.

Can anybody help me please?

Thanks

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

CIF: B11828068
c/ Romero Gago, 19
Arcos de la Frontera
11630 - Cadiz

http://www.arcoscom.com

mailto:samueldg@arcoscom.com
msn: samueldg@arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83

Re: Where is CONNMARK extension kernel 2.4.32?

[Samuel Díaz García]

Any help?

Samuel Díaz García escribió:

> Hi all.
> 
> I have troubles with CONNMARK extensions into kernel 2.4.32.
> 
> The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng 
> and I cant see CONNMARK extension into the pom-ng options and isn't in 
> kernel config.
> 
> Perhaps could be that any patch I applied before (IMQ, Layer7filter, 
> etc...) had broken it. I had compiled kernel, iptables (1.3.4) and many 
> pom-ng patches. And when I test some scripts that uses CONNMARK without 
> success (chain/tarjet error).
> I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is the 
> reason why I can view "iptables -j CONNMARK --help" help text, but I 
> can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and isn't 
> compiled into the kernel (cat /usr/src/linux/.config | grep "CONNMARK") 
> doesn't show me anythink.
> 
> Can anybody help me please?
> 
> Thanks
> 

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

CIF: B11828068
c/ Romero Gago, 19
Arcos de la Frontera
11630 - Cadiz

http://www.arcoscom.com

mailto:samueldg@arcoscom.com
msn: samueldg@arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83

Re: Where is CONNMARK extension kernel 2.4.32?

[Pablo Neira Ayuso]

Samuel Díaz García wrote:
> I have troubles with CONNMARK extensions into kernel 2.4.32.
> 
> The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng
> and I cant see CONNMARK extension into the pom-ng options and isn't in
> kernel config.

Did the patch applied cleanly?

-- 
Pablo

Re: Where is CONNMARK extension kernel 2.4.32?

[Mac!eKs]

Samuel Díaz García napisał(a):
>> Hi all.
>>
>> I have troubles with CONNMARK extensions into kernel 2.4.32.
>>
>> The problem I have is that I tried to patch a 2.4.32 kernel with 
>> pom-ng and I cant see CONNMARK extension into the pom-ng options and 
>> isn't in kernel config.
>>
>> Perhaps could be that any patch I applied before (IMQ, Layer7filter, 
>> etc...) had broken it. I had compiled kernel, iptables (1.3.4) and 
>> many pom-ng patches. And when I test some scripts that uses CONNMARK 
>> without success (chain/tarjet error).
>> I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is the 
>> reason why I can view "iptables -j CONNMARK --help" help text, but I 
>> can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and isn't 
>> compiled into the kernel (cat /usr/src/linux/.config | grep 
>> "CONNMARK") doesn't show me anythink.
>>
>> Can anybody help me please?
>>
>> Thanks
>>

which pom-ng snapshot are you using?
The last pom-ng snapshot with CONNMARK/TTL/string is from 20050918.
Then these patches were removed, because they are now in 2.6 kernel 
serie. But not in 2.4 :/

-- 
Mac!eKs

Re: Where is CONNMARK extension kernel 2.4.32?

[Samuel Díaz García]

The last pom-ng tested by me where the 20051231 and I'm sure the 
CONNMARK isn't into it.

Could any netfilter guy re-add these patches into pom-ng for the 2.4 
kernels? Or, better, talk with kernel guys to add them into 2.4 mainline?

What do you think about this propose?

Regards

Mac!eKs escribió:

> Samuel Díaz García napisał(a):
> 
>>> Hi all.
>>>
>>> I have troubles with CONNMARK extensions into kernel 2.4.32.
>>>
>>> The problem I have is that I tried to patch a 2.4.32 kernel with 
>>> pom-ng and I cant see CONNMARK extension into the pom-ng options and 
>>> isn't in kernel config.
>>>
>>> Perhaps could be that any patch I applied before (IMQ, Layer7filter, 
>>> etc...) had broken it. I had compiled kernel, iptables (1.3.4) and 
>>> many pom-ng patches. And when I test some scripts that uses CONNMARK 
>>> without success (chain/tarjet error).
>>> I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is 
>>> the reason why I can view "iptables -j CONNMARK --help" help text, 
>>> but I can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and 
>>> isn't compiled into the kernel (cat /usr/src/linux/.config | grep 
>>> "CONNMARK") doesn't show me anythink.
>>>
>>> Can anybody help me please?
>>>
>>> Thanks
>>>
> 
> which pom-ng snapshot are you using?
> The last pom-ng snapshot with CONNMARK/TTL/string is from 20050918.
> Then these patches were removed, because they are now in 2.6 kernel 
> serie. But not in 2.4 :/
> 

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

CIF: B11828068
c/ Romero Gago, 19
Arcos de la Frontera
11630 - Cadiz

http://www.arcoscom.com

mailto:samueldg@arcoscom.com
msn: samueldg@arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83

Re: Where is CONNMARK extension kernel 2.4.32?

[Mac!eKs]

Samuel Díaz García napisał(a):
> The last pom-ng tested by me where the 20051231 and I'm sure the 
> CONNMARK isn't into it.

Because in snapshots _newer_ then 20050918 there's no CONNMARK, string, TTL.

> Could any netfilter guy re-add these patches into pom-ng for the 2.4 
> kernels? Or, better, talk with kernel guys to add them into 2.4 mainline?
> 
> What do you think about this propose?

I agree :)


-- 
Mac!eKs

Re: Where is CONNMARK extension kernel 2.4.32?

[Samuel Díaz García]

What about the reinclusion of these patches into patch-o-matic-ng for kernels 2.4.x?

And about add them into kernel mainline (as in 2.6.x kernels)?

Regards

Mac!eKs wrote:
> Samuel Díaz García napisał(a):
>> The last pom-ng tested by me where the 20051231 and I'm sure the 
>> CONNMARK isn't into it.
> 
> Because in snapshots _newer_ then 20050918 there's no CONNMARK, string, 
> TTL.
> 
>> Could any netfilter guy re-add these patches into pom-ng for the 2.4 
>> kernels? Or, better, talk with kernel guys to add them into 2.4 mainline?
>>
>> What do you think about this propose?
> 
> I agree :)
> 
> 

-- 
    Samuel Díaz García
     Director Gerente
ArcosCom Wireless, S.L.L.

CIF: B11828068
c/ Romero Gago, 19
Arcos de la Frontera
11630 - Cadiz

http://www.arcoscom.com

mailto:samueldg@arcoscom.com
msn: samueldg@arcoscom.com

Móvil: 651 93 72 48
Tlfn.: 956 70 13 15
Fax:   956 70 34 83