PPTP+NAT+MASQ anyone?

PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

hi

I've kept trying now. many times, to do NAT+MASQ+PPTP, but as soon as I 
compile 2.4.18 (the only one I've managed to patch-o-matic) and boot it, it 
refuses to -j MASQUERADE. (invalid argument). Are anyone running this?

roy
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Mon, 2002-12-09 at 12:26, Roy Sigurd Karlsbakk wrote:
> hi
> 
> I've kept trying now. many times, to do NAT+MASQ+PPTP, but as soon as I 
> compile 2.4.18 (the only one I've managed to patch-o-matic) and boot it, it 
> refuses to -j MASQUERADE. (invalid argument). Are anyone running this?

recompile userspace iptables against that kernel.

And patch-o-matic from cvs works with at least 2.4.19 (2.4.18 and .20
should work aswell)

-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Monday 09 December 2002 13:25, Martin Josefsson wrote:
> On Mon, 2002-12-09 at 12:26, Roy Sigurd Karlsbakk wrote:
> > hi
> >
> > I've kept trying now. many times, to do NAT+MASQ+PPTP, but as soon as I
> > compile 2.4.18 (the only one I've managed to patch-o-matic) and boot it,
> > it refuses to -j MASQUERADE. (invalid argument). Are anyone running this?
>
> recompile userspace iptables against that kernel.
>
> And patch-o-matic from cvs works with at least 2.4.19 (2.4.18 and .20
> should work aswell)

then what's this?

In file included from 
/usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack.h:64,
                 from extensions/libipt_conntrack.c:12:
/usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack_talk.h:6:2: #error 
Only in kernel.
In file included from 
/usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack.h:65,
                 from extensions/libipt_conntrack.c:12:
/usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack_rsh.h:16:2: #error 
Only in kernel.
make: *** [extensions/libipt_conntrack_sh.o] Error 1


-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Mon, 2002-12-09 at 15:12, Roy Sigurd Karlsbakk wrote:

> > And patch-o-matic from cvs works with at least 2.4.19 (2.4.18 and .20
> > should work aswell)
> 
> then what's this?
> 
> In file included from 
> /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack.h:64,
>                  from extensions/libipt_conntrack.c:12:
> /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack_talk.h:6:2: #error 
> Only in kernel.
> In file included from 
> /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack.h:65,
>                  from extensions/libipt_conntrack.c:12:
> /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack_rsh.h:16:2: #error 
> Only in kernel.
> make: *** [extensions/libipt_conntrack_sh.o] Error 1

You said "the only one I've managed to patch-o-matic" which means the
only one you've managed to patch. What you are saying now is that you
indeed did manage to patch your kernel. Please use more accurate wording
in reports like these.

And you are NOT using patch-o-matic from cvs, I know this because these
problems were fixed some time ago (and doublechecking the files I see
that they were indeed fixed). The error you are seeing is _impossible_
with patch-o-matic from cvs (the #error lines doesn't even exist)

-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Monday 09 December 2002 15:42, Martin Josefsson wrote:
> On Mon, 2002-12-09 at 15:12, Roy Sigurd Karlsbakk wrote:
> > > And patch-o-matic from cvs works with at least 2.4.19 (2.4.18 and .20
> > > should work aswell)
> >
> > then what's this?
> >
> > In file included from
> > /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack.h:64,
> >                  from extensions/libipt_conntrack.c:12:
> > /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack_talk.h:6:2:
> > #error Only in kernel.
> > In file included from
> > /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack.h:65,
> >                  from extensions/libipt_conntrack.c:12:
> > /usr/src/linux/include/linux/netfilter_ipv4/ip_conntrack_rsh.h:16:2:
> > #error Only in kernel.
> > make: *** [extensions/libipt_conntrack_sh.o] Error 1
>
> You said "the only one I've managed to patch-o-matic" which means the
> only one you've managed to patch. What you are saying now is that you
> indeed did manage to patch your kernel. Please use more accurate wording
> in reports like these.

the only one I have been able to patch up with the patch-o-matic pptp patch, 
was 2.4.18.

> And you are NOT using patch-o-matic from cvs, I know this because these
> problems were fixed some time ago (and doublechecking the files I see
> that they were indeed fixed). The error you are seeing is _impossible_
> with patch-o-matic from cvs (the #error lines doesn't even exist)

I've tried all the ones I can find.
When trying to apply the pptp-conntrack-nat.patch, I get errors applying it. 
Do I need to hand patch this thing? I've tried with 2.4.{18,19,20}

roy



Testing... pptp-conntrack-nat.patch NOT APPLIED ( 8 missing files)
The extra/pptp-conntrack-nat patch:
   Author: Harald Welte <laforge@gnumonks.org>
   Status: Beta

   This adds CONFIG_IP_NF_PPTP:
   Connection tracking and NAT support for PPTP.

   Note that this code currently has limitations
   - can only NAT connections from PNS to PAC
   - doesnt' support multiple calls within one session

-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
Testing patch extra/pptp-conntrack-nat.patch...
   Placed new Config.in line
   Placed new Configure.help entry
   Placed new Makefile line
   Placed new Makefile line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
TEST FAILED: patch NOT applied.


-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Mon, 2002-12-09 at 15:58, Roy Sigurd Karlsbakk wrote:

> > You said "the only one I've managed to patch-o-matic" which means the
> > only one you've managed to patch. What you are saying now is that you
> > indeed did manage to patch your kernel. Please use more accurate wording
> > in reports like these.
> 
> the only one I have been able to patch up with the patch-o-matic pptp patch, 
> was 2.4.18.
> 
> > And you are NOT using patch-o-matic from cvs, I know this because these
> > problems were fixed some time ago (and doublechecking the files I see
> > that they were indeed fixed). The error you are seeing is _impossible_
> > with patch-o-matic from cvs (the #error lines doesn't even exist)
> 
> I've tried all the ones I can find.
> When trying to apply the pptp-conntrack-nat.patch, I get errors applying it. 
> Do I need to hand patch this thing? I've tried with 2.4.{18,19,20}

Did you run './runme pending' first like the documentation tells you?

-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

> > I've tried all the ones I can find.
> > When trying to apply the pptp-conntrack-nat.patch, I get errors applying
> > it. Do I need to hand patch this thing? I've tried with 2.4.{18,19,20}
>
> Did you run './runme pending' first like the documentation tells you?

yes. I get this error message when trying to patch 2.4.{19|20}. 

Testing... pptp-conntrack-nat.patch NOT APPLIED ( 8 missing files)
The extra/pptp-conntrack-nat patch:
   Author: Harald Welte <laforge@gnumonks.org>
   Status: Beta

   This adds CONFIG_IP_NF_PPTP:
   Connection tracking and NAT support for PPTP.

   Note that this code currently has limitations
   - can only NAT connections from PNS to PAC
   - doesnt' support multiple calls within one session

-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?]

roy

-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

RE: PPTP+NAT+MASQ anyone?

[Rob Sterenborg]

> yes. I get this error message when trying to patch 2.4.{19|20}. 

I compiled my 2.4.20 kernel yesterday (with pptp, h323, etc, etc) using
POM-20021208 just to test if I got any errors ; I don't and I have the
kernel up and running.

But I do get errors when compiling iptables-1.2.7a. I will post this in
another thread.


Rob

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Wed, 2002-12-11 at 12:49, Roy Sigurd Karlsbakk wrote:
> > > I've tried all the ones I can find.
> > > When trying to apply the pptp-conntrack-nat.patch, I get errors applying
> > > it. Do I need to hand patch this thing? I've tried with 2.4.{18,19,20}
> >
> > Did you run './runme pending' first like the documentation tells you?
> 
> yes. I get this error message when trying to patch 2.4.{19|20}. 

2.4.19 + all the pending stuff

Testing patch extra/pptp-conntrack-nat.patch...
   Placed new Config.in line
   Placed new Configure.help entry
   Placed new Makefile line
   Placed new Makefile line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Placed new ip_conntrack.h line
   Patch extra/pptp-conntrack-nat.patch applied cleanly.

works fine.

IIRC the pptp patch doesn't apply if you've applied tcp-windowtracking
patch, that patch is quite invasive.

I just tried applying _all_ patches that come before the pptp patch in
p-o-m to 2.4.19 and then applying the pptp patch, no problem, worked
fine.


-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

> IIRC the pptp patch doesn't apply if you've applied tcp-windowtracking
> patch, that patch is quite invasive.
>
> I just tried applying _all_ patches that come before the pptp patch in
> p-o-m to 2.4.19 and then applying the pptp patch, no problem, worked
> fine.

Then what am I doing wrong???

cd /usr/src
tar xzf packed/linux-2.4.19.tar.gz
ln -s linux-2.4.19 linux
cd netfilter/patch-o-matic
./runme pending
./runme extra

roy

-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Wed, 2002-12-11 at 15:14, Roy Sigurd Karlsbakk wrote:

> Then what am I doing wrong???
> 
> cd /usr/src
> tar xzf packed/linux-2.4.19.tar.gz
> ln -s linux-2.4.19 linux
> cd netfilter/patch-o-matic
> ./runme pending
> ./runme extra

I have no idea, you say you use p-o-m from cvs and that you apply all
pending patches... after doing that the pptp patch works fine here.

-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Wednesday 11 December 2002 15:26, Martin Josefsson wrote:
> On Wed, 2002-12-11 at 15:14, Roy Sigurd Karlsbakk wrote:
> > Then what am I doing wrong???
> >
> > cd /usr/src
> > tar xzf packed/linux-2.4.19.tar.gz
> > ln -s linux-2.4.19 linux
> > cd netfilter/patch-o-matic
> > ./runme pending
> > ./runme extra
>
> I have no idea, you say you use p-o-m from cvs and that you apply all
> pending patches... after doing that the pptp patch works fine here.

it does not here. see previous message for error message
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

> > cd /usr/src
> > tar xzf packed/linux-2.4.19.tar.gz
> > ln -s linux-2.4.19 linux
> > cd netfilter/patch-o-matic
> > ./runme pending
> > ./runme extra
>
> I have no idea, you say you use p-o-m from cvs and that you apply all
> pending patches... after doing that the pptp patch works fine here.

that's exactly what I'm doing. with kernel 2.4.19 and 2.4.20.
doesn't work
so.
can I just add the required patches manually without going for the whole 
bunch?
if so - which ones do i need?
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Wed, 2002-12-11 at 16:35, Roy Sigurd Karlsbakk wrote:

> that's exactly what I'm doing. with kernel 2.4.19 and 2.4.20.
> doesn't work
> so.
> can I just add the required patches manually without going for the whole 
> bunch?
> if so - which ones do i need?

You will at least need the newnat patch. (I hope the pptp patch doesn't
depend on some other patch in there)
But everything in the pending directory is recommended.

then just apply the pptp patch.

I can't see why this shouldn't work for you.
You are sure you are using an up to date cvs checkout?

-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Wednesday 11 December 2002 16:40, Martin Josefsson wrote:
> On Wed, 2002-12-11 at 16:35, Roy Sigurd Karlsbakk wrote:
> > that's exactly what I'm doing. with kernel 2.4.19 and 2.4.20.
> > doesn't work
> > so.
> > can I just add the required patches manually without going for the whole
> > bunch?
> > if so - which ones do i need?
>
> You will at least need the newnat patch. (I hope the pptp patch doesn't
> depend on some other patch in there)
> But everything in the pending directory is recommended.
>
> then just apply the pptp patch.
>
> I can't see why this shouldn't work for you.
> You are sure you are using an up to date cvs checkout?

# rm -rf linux-2.4.19 && tar xzf packed/linux-2.4.19.tar.gz && \
	cd netfilter/patch-o-matic && cvs update -Pd -D now && \
	./runme pending && ./runme extra

Testing... ahesp-static.patch NOT APPLIED (1 rejects out of 1 hunks)
Testing... conntrack+nat-helper-unregister.patch NOT APPLIED (6 rejects out of 
6 hunks)
Testing... ip6tables-exthdr-bug.patch.ipv6 NOT APPLIED (6 rejects out of 6 
hunks)
etc
etc
etc

what am I doing wrong?
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Wednesday 11 December 2002 16:40, Martin Josefsson wrote:
> On Wed, 2002-12-11 at 16:35, Roy Sigurd Karlsbakk wrote:
> > that's exactly what I'm doing. with kernel 2.4.19 and 2.4.20.
> > doesn't work
> > so.
> > can I just add the required patches manually without going for the whole
> > bunch?
> > if so - which ones do i need?
>
> You will at least need the newnat patch. (I hope the pptp patch doesn't
> depend on some other patch in there)
> But everything in the pending directory is recommended.
>
> then just apply the pptp patch.
>
> I can't see why this shouldn't work for you.
> You are sure you are using an up to date cvs checkout?

seems like newnat-udp-helper.patch 
[root@fw linux]# patch -p1 < 
../netfilter/patch-o-matic/pending/newnat-udp-helper.patch
patching file include/linux/netfilter_ipv4/ip_nat_helper.h
Hunk #1 succeeded at 36 (offset -14 lines).
patching file net/ipv4/netfilter/ip_nat_helper.c
Hunk #1 FAILED at 8.
Hunk #2 succeeded at 18 (offset -7 lines).
Hunk #3 succeeded at 53 (offset -2 lines).
Hunk #4 succeeded at 75 (offset -7 lines).
Hunk #5 succeeded at 174 (offset -2 lines).
Hunk #6 succeeded at 203 with fuzz 2 (offset -7 lines).
1 out of 6 hunks FAILED -- saving rejects to file 
net/ipv4/netfilter/ip_nat_helper.c.rej
patching file net/ipv4/netfilter/ip_nat_standalone.c
Hunk #1 FAILED at 358.
1 out of 1 hunk FAILED -- saving rejects to file 
net/ipv4/netfilter/ip_nat_standalone.c.rej

-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: PPTP+NAT+MASQ anyone?

[Martin Josefsson]

On Wed, 2002-12-11 at 17:01, Roy Sigurd Karlsbakk wrote:

> seems like newnat-udp-helper.patch 
> [root@fw linux]# patch -p1 < 
> ../netfilter/patch-o-matic/pending/newnat-udp-helper.patch
> patching file include/linux/netfilter_ipv4/ip_nat_helper.h
> Hunk #1 succeeded at 36 (offset -14 lines).
> patching file net/ipv4/netfilter/ip_nat_helper.c
> Hunk #1 FAILED at 8.
> Hunk #2 succeeded at 18 (offset -7 lines).
> Hunk #3 succeeded at 53 (offset -2 lines).
> Hunk #4 succeeded at 75 (offset -7 lines).
> Hunk #5 succeeded at 174 (offset -2 lines).
> Hunk #6 succeeded at 203 with fuzz 2 (offset -7 lines).
> 1 out of 6 hunks FAILED -- saving rejects to file 
> net/ipv4/netfilter/ip_nat_helper.c.rej
> patching file net/ipv4/netfilter/ip_nat_standalone.c
> Hunk #1 FAILED at 358.
> 1 out of 1 hunk FAILED -- saving rejects to file 
> net/ipv4/netfilter/ip_nat_standalone.c.rej

This patch applies fine here after applying the other submitted patches
first.
 
-- 
/Martin

Never argue with an idiot. They drag you down to their level, then beat
you with experience.

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Wednesday 11 December 2002 17:41, Martin Josefsson wrote:
> On Wed, 2002-12-11 at 17:01, Roy Sigurd Karlsbakk wrote:
> > seems like newnat-udp-helper.patch
> > [root@fw linux]# patch -p1 <
> > ../netfilter/patch-o-matic/pending/newnat-udp-helper.patch
> > patching file include/linux/netfilter_ipv4/ip_nat_helper.h
> > Hunk #1 succeeded at 36 (offset -14 lines).
> > patching file net/ipv4/netfilter/ip_nat_helper.c
> > Hunk #1 FAILED at 8.
> > Hunk #2 succeeded at 18 (offset -7 lines).
> > Hunk #3 succeeded at 53 (offset -2 lines).
> > Hunk #4 succeeded at 75 (offset -7 lines).
> > Hunk #5 succeeded at 174 (offset -2 lines).
> > Hunk #6 succeeded at 203 with fuzz 2 (offset -7 lines).
> > 1 out of 6 hunks FAILED -- saving rejects to file
> > net/ipv4/netfilter/ip_nat_helper.c.rej
> > patching file net/ipv4/netfilter/ip_nat_standalone.c
> > Hunk #1 FAILED at 358.
> > 1 out of 1 hunk FAILED -- saving rejects to file
> > net/ipv4/netfilter/ip_nat_standalone.c.rej
>
> This patch applies fine here after applying the other submitted patches
> first.

then what is wrong?????????? The kernels I've tried patching, is downloaded 
from kernel.org, and everything else works, except netfilter/p-o-m
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

[REPOST] PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

hi all

still trying to patch up my kernel to allow for PPTP NATing, but patch-o-matic 
simply fails. This is with kernel 2.4.20 (from kernel.org) and latest 
patch-o-matic from cvs.

Can someone _please_ help me here? I'm doing exactly as the doc says!

# pwd
/usr/src
# mkdir Pom
# tar xjf packed/linux-2.4.20.tar.bz2 -C Pom
./runme pending
Testing... ip_conntrack_protocol_destroy.patch NOT APPLIED (6 rejects out of 6 
hunks)
Testing... remove_no_version.patch NOT APPLIED (4 rejects out of 4 hunks)
Testing... newnat-udp-helper.patch NOT APPLIED (8 rejects out of 8 hunks)

# KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme base
...
Testing... IPV4OPTSSTRIP.patch NOT APPLIED ( 1 missing files)
Testing... NETLINK.patch NOT APPLIED ( 2 missing files)
Testing... NETMAP.patch NOT APPLIED ( 1 missing files)
Testing... REJECT.patch.ipv6 NOT APPLIED ( 1 missing files)
Testing... SAME.patch NOT APPLIED ( 2 missing files)
Testing... TTL.patch NOT APPLIED ( 2 missing files)
Testing... ahesp6.patch.ipv6 NOT APPLIED ( 4 missing files)
Testing... frag6.patch.ipv6 NOT APPLIED ( 2 missing files)
Testing... fuzzy.patch NOT APPLIED ( 2 missing files)
Testing... iplimit.patch NOT APPLIED ( 2 missing files)
Testing... ipt_unclean-ubit.patch NOT APPLIED (1 rejects out of 1 hunks)
Testing... ipv4options.patch NOT APPLIED ( 2 missing files)
Testing... ipv6header.patch.ipv6 NOT APPLIED ( 2 missing files)
Testing... mport.patch NOT APPLIED ( 2 missing files)
Testing... nth.patch NOT APPLIED ( 2 missing files)
Testing... opts6.patch.ipv6 NOT APPLIED ( 3 missing files)
Testing... pool.patch NOT APPLIED ( 5 missing files)
Testing... psd.patch NOT APPLIED ( 2 missing files)
Testing... quota.patch NOT APPLIED ( 2 missing files)
Testing... random.patch NOT APPLIED ( 2 missing files)
Testing... realm.patch NOT APPLIED ( 2 missing files)
Testing... route6.patch.ipv6 NOT APPLIED ( 2 missing files)
Testing... time.patch NOT APPLIED ( 2 missing files)

# KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme extra
...
Testing... CONNMARK.patch NOT APPLIED ( 4 missing files)
Testing... ROUTE.patch NOT APPLIED ( 2 missing files)
Testing... amanda-conntrack-nat.patch NOT APPLIED ( 3 missing files)
Testing... condition.patch NOT APPLIED ( 2 missing files)
Testing... eggdrop-conntrack.patch NOT APPLIED ( 1 missing files)
Testing... h323-conntrack-nat.patch NOT APPLIED ( 3 missing files)
Testing... ip_conntrack-timeouts.patch NOT APPLIED ( 1 missing files)
Testing... ip_tables-proc.patch NOT APPLIED (5 rejects out of 5 hunks)
Testing... ipt_TARPIT.patch NOT APPLIED ( 1 missing files)
Testing... mms-conntrack-nat.patch NOT APPLIED ( 3 missing files)
Testing... nfnetlink-ctnetlink-0.11.patch NOT APPLIED ( 4 missing files)
Testing... pptp-conntrack-nat.patch NOT APPLIED ( 8 missing files)
Testing... quake3-conntrack.patch NOT APPLIED ( 3 missing files)
Testing... recent.patch NOT APPLIED ( 2 missing files)
Testing... rsh.patch NOT APPLIED ( 2 missing files)
Testing... string.patch NOT APPLIED ( 2 missing files)
Testing... talk-conntrack-nat.patch NOT APPLIED ( 3 missing files)
Testing... tcp-window-tracking.patch NOT APPLIED (29 rejects out of 32 hunks)
Testing... tftp-conntrack-nat.patch NOT APPLIED ( 3 missing files)



-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: [REPOST] PPTP+NAT+MASQ anyone?

[Ilguiz Latypov]

Are you using the CVS repository from netfilter.org or some package based
on it?  The code from CVS worked fine for me.  The runme script should
print a message

   Examining kernel in /usr/src/Pol/linux-2.4.20

The PPTP kernel patch from CVS

  http://cvs.netfilter.org/cgi-bin/cvsweb/netfilter/patch-o-matic/extra/

fails to rewrite the replies from the remote PPTP server.  Check the
netfilter-devel thread with the fix offered by Philip Craig,

http://lists.netfilter.org/pipermail/netfilter-devel/2002-November/009902.html
http://lists.netfilter.org/pipermail/netfilter-devel/2002-December/009913.html

I've uploaded the cumulative PPTP patch against Linux 2.4.20 to

http://sourceforge.net/tracker/index.php?func=detail&aid=654010&group_id=44827&atid=441005

--
Ilguiz Latypov
Net Integration Technologies, Inc

tel. +1 (514) 281 9191 x 117

On Mon, 23 Dec 2002, Roy Sigurd Karlsbakk wrote:

> hi all
>
> still trying to patch up my kernel to allow for PPTP NATing, but patch-o-matic
> simply fails. This is with kernel 2.4.20 (from kernel.org) and latest
> patch-o-matic from cvs.
>
> Can someone _please_ help me here? I'm doing exactly as the doc says!
>
> # pwd
> /usr/src
> # mkdir Pom
> # tar xjf packed/linux-2.4.20.tar.bz2 -C Pom
> ./runme pending
> Testing... ip_conntrack_protocol_destroy.patch NOT APPLIED (6 rejects out of 6
> hunks)
> Testing... remove_no_version.patch NOT APPLIED (4 rejects out of 4 hunks)
> Testing... newnat-udp-helper.patch NOT APPLIED (8 rejects out of 8 hunks)
>
> # KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme base
> ...
> Testing... IPV4OPTSSTRIP.patch NOT APPLIED ( 1 missing files)
> Testing... NETLINK.patch NOT APPLIED ( 2 missing files)
> Testing... NETMAP.patch NOT APPLIED ( 1 missing files)
> Testing... REJECT.patch.ipv6 NOT APPLIED ( 1 missing files)
> Testing... SAME.patch NOT APPLIED ( 2 missing files)
> Testing... TTL.patch NOT APPLIED ( 2 missing files)
> Testing... ahesp6.patch.ipv6 NOT APPLIED ( 4 missing files)
> Testing... frag6.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... fuzzy.patch NOT APPLIED ( 2 missing files)
> Testing... iplimit.patch NOT APPLIED ( 2 missing files)
> Testing... ipt_unclean-ubit.patch NOT APPLIED (1 rejects out of 1 hunks)
> Testing... ipv4options.patch NOT APPLIED ( 2 missing files)
> Testing... ipv6header.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... mport.patch NOT APPLIED ( 2 missing files)
> Testing... nth.patch NOT APPLIED ( 2 missing files)
> Testing... opts6.patch.ipv6 NOT APPLIED ( 3 missing files)
> Testing... pool.patch NOT APPLIED ( 5 missing files)
> Testing... psd.patch NOT APPLIED ( 2 missing files)
> Testing... quota.patch NOT APPLIED ( 2 missing files)
> Testing... random.patch NOT APPLIED ( 2 missing files)
> Testing... realm.patch NOT APPLIED ( 2 missing files)
> Testing... route6.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... time.patch NOT APPLIED ( 2 missing files)
>
> # KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme extra
> ...
> Testing... CONNMARK.patch NOT APPLIED ( 4 missing files)
> Testing... ROUTE.patch NOT APPLIED ( 2 missing files)
> Testing... amanda-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... condition.patch NOT APPLIED ( 2 missing files)
> Testing... eggdrop-conntrack.patch NOT APPLIED ( 1 missing files)
> Testing... h323-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... ip_conntrack-timeouts.patch NOT APPLIED ( 1 missing files)
> Testing... ip_tables-proc.patch NOT APPLIED (5 rejects out of 5 hunks)
> Testing... ipt_TARPIT.patch NOT APPLIED ( 1 missing files)
> Testing... mms-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... nfnetlink-ctnetlink-0.11.patch NOT APPLIED ( 4 missing files)
> Testing... pptp-conntrack-nat.patch NOT APPLIED ( 8 missing files)
> Testing... quake3-conntrack.patch NOT APPLIED ( 3 missing files)
> Testing... recent.patch NOT APPLIED ( 2 missing files)
> Testing... rsh.patch NOT APPLIED ( 2 missing files)
> Testing... string.patch NOT APPLIED ( 2 missing files)
> Testing... talk-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... tcp-window-tracking.patch NOT APPLIED (29 rejects out of 32 hunks)
> Testing... tftp-conntrack-nat.patch NOT APPLIED ( 3 missing files)
>
>
>
> --
> Roy Sigurd Karlsbakk, Datavaktmester
> ProntoTV AS - http://www.pronto.tv/
> Tel: +47 9801 3356
>
> Computers are like air conditioners.
> They stop working when you open Windows.
>
>
>
>

Re: [REPOST] PPTP+NAT+MASQ anyone?

[Diego Sarasua]

i have used Newnat Kernel patch it Works Awesome
http://www.kfki.hu/~kadlec/sw/netfilter/newnat6.html
apply , make menuconfig , select pptp masquerade and DONE !!!

im currently using this patch with 7 clients over the gateway without any
trouble.
Please Forgive my english
Diego
----- Original Message -----
From: "Roy Sigurd Karlsbakk" <roy@karlsbakk.net>
To: "Netfilter mailinglist" <netfilter@lists.netfilter.org>
Sent: Monday, December 23, 2002 10:15 AM
Subject: [REPOST] PPTP+NAT+MASQ anyone?


> hi all
>
> still trying to patch up my kernel to allow for PPTP NATing, but
patch-o-matic
> simply fails. This is with kernel 2.4.20 (from kernel.org) and latest
> patch-o-matic from cvs.
>
> Can someone _please_ help me here? I'm doing exactly as the doc says!
>
> # pwd
> /usr/src
> # mkdir Pom
> # tar xjf packed/linux-2.4.20.tar.bz2 -C Pom
> ./runme pending
> Testing... ip_conntrack_protocol_destroy.patch NOT APPLIED (6 rejects out
of 6
> hunks)
> Testing... remove_no_version.patch NOT APPLIED (4 rejects out of 4 hunks)
> Testing... newnat-udp-helper.patch NOT APPLIED (8 rejects out of 8 hunks)
>
> # KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme base
> ...
> Testing... IPV4OPTSSTRIP.patch NOT APPLIED ( 1 missing files)
> Testing... NETLINK.patch NOT APPLIED ( 2 missing files)
> Testing... NETMAP.patch NOT APPLIED ( 1 missing files)
> Testing... REJECT.patch.ipv6 NOT APPLIED ( 1 missing files)
> Testing... SAME.patch NOT APPLIED ( 2 missing files)
> Testing... TTL.patch NOT APPLIED ( 2 missing files)
> Testing... ahesp6.patch.ipv6 NOT APPLIED ( 4 missing files)
> Testing... frag6.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... fuzzy.patch NOT APPLIED ( 2 missing files)
> Testing... iplimit.patch NOT APPLIED ( 2 missing files)
> Testing... ipt_unclean-ubit.patch NOT APPLIED (1 rejects out of 1 hunks)
> Testing... ipv4options.patch NOT APPLIED ( 2 missing files)
> Testing... ipv6header.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... mport.patch NOT APPLIED ( 2 missing files)
> Testing... nth.patch NOT APPLIED ( 2 missing files)
> Testing... opts6.patch.ipv6 NOT APPLIED ( 3 missing files)
> Testing... pool.patch NOT APPLIED ( 5 missing files)
> Testing... psd.patch NOT APPLIED ( 2 missing files)
> Testing... quota.patch NOT APPLIED ( 2 missing files)
> Testing... random.patch NOT APPLIED ( 2 missing files)
> Testing... realm.patch NOT APPLIED ( 2 missing files)
> Testing... route6.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... time.patch NOT APPLIED ( 2 missing files)
>
> # KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme extra
> ...
> Testing... CONNMARK.patch NOT APPLIED ( 4 missing files)
> Testing... ROUTE.patch NOT APPLIED ( 2 missing files)
> Testing... amanda-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... condition.patch NOT APPLIED ( 2 missing files)
> Testing... eggdrop-conntrack.patch NOT APPLIED ( 1 missing files)
> Testing... h323-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... ip_conntrack-timeouts.patch NOT APPLIED ( 1 missing files)
> Testing... ip_tables-proc.patch NOT APPLIED (5 rejects out of 5 hunks)
> Testing... ipt_TARPIT.patch NOT APPLIED ( 1 missing files)
> Testing... mms-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... nfnetlink-ctnetlink-0.11.patch NOT APPLIED ( 4 missing files)
> Testing... pptp-conntrack-nat.patch NOT APPLIED ( 8 missing files)
> Testing... quake3-conntrack.patch NOT APPLIED ( 3 missing files)
> Testing... recent.patch NOT APPLIED ( 2 missing files)
> Testing... rsh.patch NOT APPLIED ( 2 missing files)
> Testing... string.patch NOT APPLIED ( 2 missing files)
> Testing... talk-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... tcp-window-tracking.patch NOT APPLIED (29 rejects out of 32
hunks)
> Testing... tftp-conntrack-nat.patch NOT APPLIED ( 3 missing files)
>
>
>
> --
> Roy Sigurd Karlsbakk, Datavaktmester
> ProntoTV AS - http://www.pronto.tv/
> Tel: +47 9801 3356
>
> Computers are like air conditioners.
> They stop working when you open Windows.
>
>
>

Re: [REPOST] PPTP+NAT+MASQ anyone? (!!!!!!!!!!!!!!!!!! SORRY BAD LINK !!!!!!!!!!!!!!!!!)

[Diego Sarasua]

http://roeder.goe.net/~koepi/newnat.html
this is the newnat patch link
sorry again
Diego

----- Original Message -----
From: "Roy Sigurd Karlsbakk" <roy@karlsbakk.net>
To: "Netfilter mailinglist" <netfilter@lists.netfilter.org>
Sent: Monday, December 23, 2002 10:15 AM
Subject: [REPOST] PPTP+NAT+MASQ anyone?


> hi all
>
> still trying to patch up my kernel to allow for PPTP NATing, but
patch-o-matic
> simply fails. This is with kernel 2.4.20 (from kernel.org) and latest
> patch-o-matic from cvs.
>
> Can someone _please_ help me here? I'm doing exactly as the doc says!
>
> # pwd
> /usr/src
> # mkdir Pom
> # tar xjf packed/linux-2.4.20.tar.bz2 -C Pom
> ./runme pending
> Testing... ip_conntrack_protocol_destroy.patch NOT APPLIED (6 rejects out
of 6
> hunks)
> Testing... remove_no_version.patch NOT APPLIED (4 rejects out of 4 hunks)
> Testing... newnat-udp-helper.patch NOT APPLIED (8 rejects out of 8 hunks)
>
> # KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme base
> ...
> Testing... IPV4OPTSSTRIP.patch NOT APPLIED ( 1 missing files)
> Testing... NETLINK.patch NOT APPLIED ( 2 missing files)
> Testing... NETMAP.patch NOT APPLIED ( 1 missing files)
> Testing... REJECT.patch.ipv6 NOT APPLIED ( 1 missing files)
> Testing... SAME.patch NOT APPLIED ( 2 missing files)
> Testing... TTL.patch NOT APPLIED ( 2 missing files)
> Testing... ahesp6.patch.ipv6 NOT APPLIED ( 4 missing files)
> Testing... frag6.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... fuzzy.patch NOT APPLIED ( 2 missing files)
> Testing... iplimit.patch NOT APPLIED ( 2 missing files)
> Testing... ipt_unclean-ubit.patch NOT APPLIED (1 rejects out of 1 hunks)
> Testing... ipv4options.patch NOT APPLIED ( 2 missing files)
> Testing... ipv6header.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... mport.patch NOT APPLIED ( 2 missing files)
> Testing... nth.patch NOT APPLIED ( 2 missing files)
> Testing... opts6.patch.ipv6 NOT APPLIED ( 3 missing files)
> Testing... pool.patch NOT APPLIED ( 5 missing files)
> Testing... psd.patch NOT APPLIED ( 2 missing files)
> Testing... quota.patch NOT APPLIED ( 2 missing files)
> Testing... random.patch NOT APPLIED ( 2 missing files)
> Testing... realm.patch NOT APPLIED ( 2 missing files)
> Testing... route6.patch.ipv6 NOT APPLIED ( 2 missing files)
> Testing... time.patch NOT APPLIED ( 2 missing files)
>
> # KERNEL_DIR=/usr/src/Pom/linux-2.4.20 ./runme extra
> ...
> Testing... CONNMARK.patch NOT APPLIED ( 4 missing files)
> Testing... ROUTE.patch NOT APPLIED ( 2 missing files)
> Testing... amanda-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... condition.patch NOT APPLIED ( 2 missing files)
> Testing... eggdrop-conntrack.patch NOT APPLIED ( 1 missing files)
> Testing... h323-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... ip_conntrack-timeouts.patch NOT APPLIED ( 1 missing files)
> Testing... ip_tables-proc.patch NOT APPLIED (5 rejects out of 5 hunks)
> Testing... ipt_TARPIT.patch NOT APPLIED ( 1 missing files)
> Testing... mms-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... nfnetlink-ctnetlink-0.11.patch NOT APPLIED ( 4 missing files)
> Testing... pptp-conntrack-nat.patch NOT APPLIED ( 8 missing files)
> Testing... quake3-conntrack.patch NOT APPLIED ( 3 missing files)
> Testing... recent.patch NOT APPLIED ( 2 missing files)
> Testing... rsh.patch NOT APPLIED ( 2 missing files)
> Testing... string.patch NOT APPLIED ( 2 missing files)
> Testing... talk-conntrack-nat.patch NOT APPLIED ( 3 missing files)
> Testing... tcp-window-tracking.patch NOT APPLIED (29 rejects out of 32
hunks)
> Testing... tftp-conntrack-nat.patch NOT APPLIED ( 3 missing files)
>
>
>
> --
> Roy Sigurd Karlsbakk, Datavaktmester
> ProntoTV AS - http://www.pronto.tv/
> Tel: +47 9801 3356
>
> Computers are like air conditioners.
> They stop working when you open Windows.
>
>
>

Re: PPTP+NAT+MASQ anyone?

[Roy Sigurd Karlsbakk]

On Wednesday 11 December 2002 16:40, Martin Josefsson wrote:
> On Wed, 2002-12-11 at 16:35, Roy Sigurd Karlsbakk wrote:
> > that's exactly what I'm doing. with kernel 2.4.19 and 2.4.20.
> > doesn't work
> > so.
> > can I just add the required patches manually without going for the whole
> > bunch?
> > if so - which ones do i need?
>
> You will at least need the newnat patch. (I hope the pptp patch doesn't
> depend on some other patch in there)
> But everything in the pending directory is recommended.
>
> then just apply the pptp patch.
>
> I can't see why this shouldn't work for you.
> You are sure you are using an up to date cvs checkout?

ok.
testing with 2.4.20:

# rm -rf linux-2.4.19 && \
	tar xzf packed/linux-2.4.19.tar.gz && \
	cd linux-2.4.19 && \
	zcat ../packed/patch-2.4.20.gz | patch -p1 && \
	cd ../netfilter/patch-o-matic && \
	cvs update -Pd -D now && \
	./runme pending
...
Testing... ip_conntrack_protocol_destroy.patch NOT APPLIED (6 rejects out of 6 
hunks)
Testing... remove_no_version.patch NOT APPLIED (4 rejects out of 4 hunks)
Testing... newnat-udp-helper.patch NOT APPLIED (8 rejects out of 8 hunks)
...
# patch -p1 < /usr/src/netfilter/patch-o-matic/extra/pptp-conntrack-nat.patch
patching file include/linux/netfilter_ipv4/ip_conntrack_pptp.h
patching file include/linux/netfilter_ipv4/ip_conntrack_proto_gre.h
patching file include/linux/netfilter_ipv4/ip_conntrack_tuple.h
patching file include/linux/netfilter_ipv4/ip_nat_pptp.h
patching file net/ipv4/netfilter/ip_conntrack_core.c
Hunk #1 succeeded at 144 (offset 4 lines).
Hunk #3 succeeded at 941 with fuzz 2 (offset 75 lines).
Hunk #4 succeeded at 994 (offset 18 lines).
patching file net/ipv4/netfilter/ip_conntrack_pptp.c
patching file net/ipv4/netfilter/ip_conntrack_pptp_priv.h
patching file net/ipv4/netfilter/ip_conntrack_proto_gre.c
patching file net/ipv4/netfilter/ip_nat_core.c
Hunk #1 succeeded at 434 (offset 2 lines).
patching file net/ipv4/netfilter/ip_nat_pptp.c
patching file net/ipv4/netfilter/ip_nat_proto_gre.c
patching file net/ipv4/netfilter/Config.in
Hunk #1 succeeded at 77 (offset 9 lines).
patching file net/ipv4/netfilter/Makefile
Hunk #1 succeeded at 31 with fuzz 2.
# 

...but it's not there
how do I patch manually?
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

RE: PPTP+NAT+MASQ anyone?

[Rob Sterenborg]

[-- Attachment #1: Type: text/plain, Size: 359 bytes --]

> I've kept trying now. many times, to do NAT+MASQ+PPTP, but as 
> soon as I 
> compile 2.4.18 (the only one I've managed to patch-o-matic) 
> and boot it, it 
> refuses to -j MASQUERADE. (invalid argument). Are anyone running this?

Yup, on my test-box : 2.4.20-rc1 (still, but it's doing nothing at the
moment).
I had no problems patching it however.


Rob

[-- Attachment #2: Type: text/html, Size: 863 bytes --]