Problem compiling

Problem compiling

[John Haxby]

Hello All,

I'm having problems compiling this: 
http://marek.terminus.sk/prog/ipt_sysrq.shtml

This is on Fedora 9 and RHEL5 and in both cases I get this error:

/usr/include/iptables.h:5:29: error: libiptc/libiptc.h: No such file or 
directory

Now, the easiest way to "fix" this is it to make sure that 
libiptc/libiptc.h is installed into /usr/include but I'm wary of this as 
libiptc.a has a comment in the Makefile that says "libiptc is not a 
public interface and therefore not installed."

What is the right thing to do here?   Install the missing header file(s) 
or fix the normally installed header files to not refer to those that 
aren't?

jch

Problem compiling

[John Haxby]

[resend -- sent to wrong list originally, sorry]

Hello All,

I'm having problems compiling this:
http://marek.terminus.sk/prog/ipt_sysrq.shtml

This is on Fedora 9 and RHEL5 and in both cases I get this error:

/usr/include/iptables.h:5:29: error: libiptc/libiptc.h: No such file or
directory

Now, the easiest way to "fix" this is it to make sure that
libiptc/libiptc.h is installed into /usr/include but I'm wary of this as
libiptc.a has a comment in the Makefile that says "libiptc is not a
public interface and therefore not installed."

What is the right thing to do here?   Install the missing header file(s)
or fix the normally installed header files to not refer to those that
aren't?

jch

Re: Problem compiling

[Jan Engelhardt]

On Monday 2008-11-17 17:29, John Haxby wrote:

> Hello All,
>
> I'm having problems compiling this:
> http://marek.terminus.sk/prog/ipt_sysrq.shtml
>
> This is on Fedora 9 and RHEL5 and in both cases I get this error:
>
> /usr/include/iptables.h:5:29: error: libiptc/libiptc.h: No such file or
> directory

(Just noting that this error has nothing to do with ipt_sysrq.)

> Now, the easiest way to "fix" this is it to make sure that libiptc/libiptc.h is
> installed into /usr/include

What iptables version?

Re: Problem compiling

[John Haxby]

Jan Engelhardt wrote:
> On Monday 2008-11-17 17:29, John Haxby wrote:
>
>   
>> Hello All,
>>
>> I'm having problems compiling this:
>> http://marek.terminus.sk/prog/ipt_sysrq.shtml
>>
>> This is on Fedora 9 and RHEL5 and in both cases I get this error:
>>
>> /usr/include/iptables.h:5:29: error: libiptc/libiptc.h: No such file or
>> directory
>>     
>
> (Just noting that this error has nothing to do with ipt_sysrq.)
>   

Correct -- it's just an example.
>   
>> Now, the easiest way to "fix" this is it to make sure that libiptc/libiptc.h is
>> installed into /usr/include
>>     
>
> What iptables version?
>   
Fedora says iptables-1.4.1.1-2.fc9.x86_64 -- the few patches on top of 
1.4.1 don't do anything for this problem.

jch

Re: Problem compiling

[Jan Engelhardt]

On Monday 2008-11-17 23:37, John Haxby wrote:
>>   
>> > Now, the easiest way to "fix" this is it to make sure that
>> > libiptc/libiptc.h is
>> > installed into /usr/include
>>
>> What iptables version?
>>   
> Fedora says iptables-1.4.1.1-2.fc9.x86_64 -- the few patches on top of 1.4.1
> don't do anything for this problem.

Blame the Fedora packager for that.
libiptc.h is installed with the raw iptables tarball since 1.4.0+git61.

Re: Problem compiling

[John Haxby]

Jan Engelhardt wrote:
>
> Blame the Fedora packager for that.
> libiptc.h is installed with the raw iptables tarball since 1.4.0+git61.
>   

I'd love to, but:

$ tar xf iptables-1.4.1.1.tar.bz2
$ cd iptables-1.4.1.1
$ ./configure --preifx=/var/tmp/iptables-test --enable-devel --enable-libipq
(the --enable's are just in case)
$ make
$ make install
$ find /var/tmp/iptables-test -name '*.h'
/var/tmp/iptables-test/include/xtables.h
/var/tmp/iptables-test/include/libipq.h
/var/tmp/iptables-test/include/ip6tables.h
/var/tmp/iptables-test/include/libiptc/ipt_kernel_headers.h
/var/tmp/iptables-test/include/libiptc/libxtc.h
/var/tmp/iptables-test/include/iptables.h

The same thing with iptables-1.4.2 gives these header files:

/var/tmp/iptables-test/include/xtables.h
/var/tmp/iptables-test/include/libipq.h

Clearly I'm doing something wrong.   Could you enlighten me?

jch

Re: Problem compiling

[Jan Engelhardt]

On Tuesday 2008-11-18 19:14, John Haxby wrote:
> Jan Engelhardt wrote:
>>
>>> /usr/include/iptables.h:5:29: error: libiptc/libiptc.h: No such file or
>>> directory
>>
>> [Try] Blame the Fedora packager for that.
>> libiptc.h is installed with the raw iptables tarball since 1.4.0+git61.
>
> I'd love to, but:[...]
> Clearly I'm doing something wrong.   Could you enlighten me?

There must have been a dimensional rift somewhere and I must have mixed 
something up. It is libxtc.h which is installed since then, because 
xtables.h depended on it somehow. Upon reanalyzing, I see that there is 
now room for patches to correct the current state. Thanks for pointing 
out!

In short, including iptables.h is not appropriate anymore; for
all the important definitions have moved to xtables.h.

Re: Problem compiling

[Jan Engelhardt]

On Tuesday 2008-11-18 19:27, Jan Engelhardt wrote:
>On Tuesday 2008-11-18 19:14, John Haxby wrote:
>> Jan Engelhardt wrote:
>>>
>>>> /usr/include/iptables.h:5:29: error: libiptc/libiptc.h: No such file or
>>>> directory
>>>
>>> [Try] Blame the Fedora packager for that.
>>> libiptc.h is installed with the raw iptables tarball since 1.4.0+git61.
>>
>> I'd love to, but:[...]
>> Clearly I'm doing something wrong.   Could you enlighten me?
>
>In short, including iptables.h is not appropriate anymore; for
>all the important definitions have moved to xtables.h.

Specifically... iptables.h was removed from the install base in
commit v1.4.1.1-2-g72ed4ff, already and libiptc was previously
removed in v1.4.2-rc1-5-g415a858.

So once you use(d) v1.4.2 or up, the problem would have never showed
up in the first place ;-)

Re: Problem compiling

[John Haxby]

Jan Engelhardt wrote:
> Specifically... iptables.h was removed from the install base in
> commit v1.4.1.1-2-g72ed4ff, already and libiptc was previously
> removed in v1.4.2-rc1-5-g415a858.
>
> So once you use(d) v1.4.2 or up, the problem would have never showed
> up in the first place ;-)
>   

Thanks.   That points me in the right direction for persuading ipt_sysrq 
to compile on the various platforms I want it to compile on.

jch

Re: Problem compiling

[Jan Engelhardt]

On Tuesday 2008-11-18 20:21, John Haxby wrote:
> Jan Engelhardt wrote:
>> Specifically... iptables.h was removed from the install base in
>> commit v1.4.1.1-2-g72ed4ff, already and libiptc was previously
>> removed in v1.4.2-rc1-5-g415a858.
>>
>> So once you use(d) v1.4.2 or up, the problem would have never showed
>> up in the first place ;-)
>
> Thanks.   That points me in the right direction for persuading ipt_sysrq to
> compile on the various platforms I want it to compile on.

If you do not need the authentication bits (the SHA crypto and replay 
timing 'protection'), you can also use xt_SYSRQ in Xtables-addons.