From mboxrd@z Thu Jan 1 00:00:00 1970 From: "J.E." Date: Wed, 14 Mar 2007 22:34:47 +0000 Subject: [LARTC] ipp2p problems Message-Id: <45F87887.3060906@menta.net> List-Id: References: <45F7FC91.8010503@menta.net> In-Reply-To: <45F7FC91.8010503@menta.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Thank you Marco. >> You are running iptables version 1.3.1, and this is not the version you compiled ipp2p for (1.3.3) But I make a mistake in my explanation. I've mixed the results of Ubuntu Dapper with results of Ubuntu Breezy, sorry. Instead of 1.3.1 should it would have to put 1.3.3. In any case I will verify it. But i'm sure at 99% that i've used the correct source code. >> What is the output of the ipp2p make install? I don't made "make install". Is it necesary? Simply i made 5) cp libipt_ipp2p.so /lib/iptables 6) cp ipt_ipp2p.ko /lib/modules/`uname -r`/kernel/net/ipv4/netfilter May be I need to recompile iptables? I'm using the same version of iptables debian packet, to compile ipp2p. May be it's a silly question, but now i doubt of everything. ;) First time: ----------- Compiled in Ubuntu Dapper Kernel: 2.6.15-28-386 iptables: 1.3.3 ipp2p: 0.8.0 Second time: ------------ Compiled in Ubuntu Dapper Kernel: 2.6.15-27-386 iptables: 1.3.3 ipp2p: 0.8.0 Third time: ------------ Compiled in Ubuntu Breezy Kernel: 2.6.12-10-386 iptables: 1.3.1 ipp2p: 0.8.0 -------------------- This would be the correct explanation. 1) Download: * iptables-dev (apt-get) * kernel-headers-2.x.x (your kernel, "uname -r") * src of your iptables (iptables -V and apt-get source) * ipp2p-0.8.0.tar.gz (stable) 2) untar ipp2p and cd ipp2p 3) Edit Makefile, if it's necesary: * IPTABLES_SRC = /usr/src/iptables * In my case, the headers are detected automaticaly. 4) make (WITHOUT ERRORS!!! ;) ) 5) cp libipt_ipp2p.so /lib/iptables 6) cp ipt_ipp2p.ko /lib/modules/`uname -r`/kernel/net/ipv4/netfilter 7) depmod -A 8) insmod ipt_ipp2p.ko (or modprobe) 9) lsmod | grep ipp2p 10) iptables -m ipp2p --help root@servidor:/usr/src/ipp2p-0.8.0# make make -C /lib/modules/2.6.15-28-386/build SUBDIRS=/usr/src/ipp2p-0.8.0 modules make[1]: se ingresa al directorio `/usr/src/linux-headers-2.6.15-28-386' CC [M] /usr/src/ipp2p-0.8.0/ipt_ipp2p.o Building modules, stage 2. MODPOST CC /usr/src/ipp2p-0.8.0/ipt_ipp2p.mod.o LD [M] /usr/src/ipp2p-0.8.0/ipt_ipp2p.ko make[1]: se sale del directorio `/usr/src/linux-headers-2.6.15-28-386' gcc -O3 -Wall -DIPTABLES_VERSION=\"\" -I/usr/src/iptables-1.3.3/include -fPIC -c libipt_ipp2p.c ld -shared -o libipt_ipp2p.so libipt_ipp2p.o Seems that all it's ok... . . . But ... root at servidor:/usr/src/ipp2p-0.8.0# iptables -m ipp2p --help iptables: match `ipp2p' v (I'm v1.3.3). <--- mistake Only i get this line, iptables: match `ipp2p' v (I'm v1.3.3) <--- mistake root at servidor:/usr/src/ipp2p-0.8.0# iptables -A FORWARD -m ipp2p --ipp2p -j DROP iptables: match `ipp2p' v (I'm v1.3.3). <--- mistake Only one line, again. root at servidor:/usr/src/ipp2p-0.8.0# iptables -L FORWARD Chain FORWARD (policy DROP) target prot opt source destination DROP !icmp -- anywhere anywhere state INVALID eth0_fwd all -- anywhere anywhere eth1_fwd all -- anywhere anywhere Reject all -- anywhere anywhere LOG all -- anywhere anywhere limit: avg 5/min burst 2 LOG level info prefix `Shorewall:FORWARD:REJECT:' reject all -- anywhere anywhere I don't see anything of ipp2p. Thank you. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc