Missing kernel header files

Missing kernel header files

[David Corrales]

Hi everyone,

Recently I ran across some issues when compiling iptables 1.2.9
against kernel 2.6.24. It seems that between kernel versions 2.6.31 to
2.6.32, lots of headers were removed from linux/include/netfilter and
linux/include/netfilter_ipv4. Some of them are ipt_connmark.h,
ipt_conntrack.h, ipt_MARK.h and so on.

I recon that the iptables version is rather old but I was wondering if
it possible to patch it in order to compile with the upgrades. I just
can't seem to find any good info on these changes, what was merged or
what's now deprecated. There's no "migrating" guide anywhere and
google isn't helping as much as I would like it to.

Thanks in advance,
-David

Re: Missing kernel header files

[Jan Engelhardt]

On Thursday 2010-09-30 22:51, David Corrales wrote:

>Hi everyone,
>
>Recently I ran across some issues when compiling iptables 1.2.9
>against kernel 2.6.24.

Choosing arbitrary kernels is not designed to work before 1.4.3.

>I recon that the iptables version is rather old but I was wondering if
>it possible to patch it in order to compile with the upgrades.

Why bother with patching when just using 1.4.9 yields equivalent 
behavior?

Re: Missing kernel header files

[David Corrales]

> Choosing arbitrary kernels is not designed to work before 1.4.3.

Oh, that's too bad :(

> Why bother with patching when just using 1.4.9 yields equivalent
> behavior?
>

Thing is that other software modules depend on this headers as well so
I wanted to minimize the impact. I rather patch than bump the version
number.

Re: Missing kernel header files

[Jan Engelhardt]

On Monday 2010-10-04 18:56, David Corrales wrote:

>> Choosing arbitrary kernels is not designed to work before 1.4.3.
>
>Oh, that's too bad :(
>
>> Why bother with patching when just using 1.4.9 yields equivalent
>> behavior?
>>
>
>Thing is that other software modules depend on this headers as well so
>I wanted to minimize the impact. I rather patch than bump the version
>number.

The risk of incomplete patching is higher than using a newer release.