problem with ip_connlimit modul

problem with ip_connlimit modul

[Thomas Martens]

Hi!

I try to compile the new 2.4.25 kernel with patch-o-matic-20031219 and I've a little problem.

All iptables works fine, but just the ipt_connlimit module makes trouble, when I try to compile it.

Here's my output:


gcc -D__KERNEL__ -I/usr/src/linux-2.4.25/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=athlon -DMODULE -DMODVERSIONS -include /usr/src/linux-2.4.25/include/linux/modversions.h  -nostdinc -iwithprefix include -DKBUILD_BASENAME=ipt_connlimit  -c -o ipt_connlimit.o ipt_connlimit.c
ipt_connlimit.c: In function `init':
ipt_connlimit.c:219: `ip_conntrack_module' undeclared (first use in this function)
ipt_connlimit.c:219: (Each undeclared identifier is reported only once
ipt_connlimit.c:219: for each function it appears in.)
ipt_connlimit.c:220: warning: value computed is not used
ipt_connlimit.c: In function `fini':
ipt_connlimit.c:227: `ip_conntrack_module' undeclared (first use in this function)
ipt_connlimit.c:228: warning: value computed is not used
make[2]: *** [ipt_connlimit.o] Error 1
make[2]: Leaving directory `/usr/src/linux-2.4.25/net/ipv4/netfilter'
make[1]: *** [_modsubdir_ipv4/netfilter] Error 2
make[1]: Leaving directory `/usr/src/linux-2.4.25/net'
make: *** [_mod_net] Error 2


Can anybody help? I think I've to rename something in ipt_connlimit.c, but I don't know that....
Thanks in advance.

Best regards,
Thomas

problem with ip_connlimit modul

[cky]

Hi!

I try to compile the new 2.4.25 kernel with patch-o-matic-20031219 and I've a little problem.

All iptables works fine, but just the ipt_connlimit module makes trouble, when I try to compile it.

Here's my output:


gcc -D__KERNEL__ -I/usr/src/linux-2.4.25/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=athlon -DMODULE -DMODVERSIONS -include /usr/src/linux-2.4.25/include/linux/modversions.h  -nostdinc -iwithprefix include -DKBUILD_BASENAME=ipt_connlimit  -c -o ipt_connlimit.o ipt_connlimit.c
ipt_connlimit.c: In function `init':
ipt_connlimit.c:219: `ip_conntrack_module' undeclared (first use in this function)
ipt_connlimit.c:219: (Each undeclared identifier is reported only once
ipt_connlimit.c:219: for each function it appears in.)
ipt_connlimit.c:220: warning: value computed is not used
ipt_connlimit.c: In function `fini':
ipt_connlimit.c:227: `ip_conntrack_module' undeclared (first use in this function)
ipt_connlimit.c:228: warning: value computed is not used
make[2]: *** [ipt_connlimit.o] Error 1
make[2]: Leaving directory `/usr/src/linux-2.4.25/net/ipv4/netfilter'
make[1]: *** [_modsubdir_ipv4/netfilter] Error 2
make[1]: Leaving directory `/usr/src/linux-2.4.25/net'
make: *** [_mod_net] Error 2


Can anybody help? I think I've to rename something in ipt_connlimit.c, but I don't know that....
Thanks in advance.

Best regards,
Thomas

Re: problem with ip_connlimit modul

[Mark Vevers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 23 Feb 2004 4:06 pm, cky@arcor.de wrote:
> I try to compile the new 2.4.25 kernel with patch-o-matic-20031219 and I've
> a little problem.
>
> All iptables works fine, but just the ipt_connlimit module makes trouble,
> when I try to compile it.

Check the latest CVS for the connlimit module ....  ip_conntrack_module
is no longer used and the lines using it are deleted ... I think this is
related to refcount fixing mentioned in the 2.4.25 change log.

The following patch if applied as patch -lp0 < connlimit.patch in
<KERNEL_DIR>/net/ipv4/netfilter will do just that .... 
(save the text between the lines as connlimit.patch)

cheers
Mark
- -----------------------------------------------------------------------------------------------
- --- ipt_connlimit.c     2004-02-23 12:12:55.000000000 +0000
+++ ipt_connlimit.c     2004-02-23 12:13:49.000000000 +0000
@@ -216,7 +216,4 @@
 static int __init init(void)
 {
- -	/* NULL if ip_conntrack not a module */
- -	if (ip_conntrack_module)
- -		__MOD_INC_USE_COUNT(ip_conntrack_module);
	return ipt_register_match(&connlimit_match);
 }
@@ -225,6 +222,4 @@
 {
	ipt_unregister_match(&connlimit_match);
- -	if (ip_conntrack_module)
- -		__MOD_DEC_USE_COUNT(ip_conntrack_module);
 }

- ------------------------------------------------------------------------------------------------
- -- 
Mark Vevers.    mark@ifl.net / mark@vevers.net
Principal Internet Engineer, Internet for Learning,
Research Machines Plc. (AS5503)
- --
GPG Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB08F3CA3
Fingerprint: 85BA 30C4 9EC8 1792 4C8C   C31E 58B5 3D1C B08F 3CA3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFAOjD4WLU9HLCPPKMRAlbeAKCKVikbwOt/UzqKzXHCbg8//uHT4gCfWI4n
1EHcVx12skVBs1ewm7DeRok=
=ExXE
-----END PGP SIGNATURE-----