Iptables-1.2.9/10 compile failure with linux 2.6.7 headers

Iptables-1.2.9/10 compile failure with linux 2.6.7 headers

[Andrew Walrond]

The addition of a
	__user
attribute to a line in
	linux-2.6.7/include/linux/netfilter_ipv4/ip_tables.h
causes iptables build to fail unless I export
	CC="gcc -D__user= "

Presumably ip_tables.h should include a header defining __user, or iptables 
should include the relevant header before ip_tables.h ?

Sorry if this has already been reported; Archive search found nothing on 
either ML.

Andrew Walrond

Re: Iptables-1.2.9/10 compile failure with linux 2.6.7 headers

[David Ford]

[-- Attachment #1: Type: text/plain, Size: 1017 bytes --]

Iptables should be using linux-libc-headers headers instead of kernel 
headers.

Remove -I$(KERNEL_DIR)/include from your makefile, see this patch here: 
http://ep09.pld-linux.org/~mmazur/linux-libc-headers/patches/iptables.patch 
<http://ep09.pld-linux.org/%7Emmazur/linux-libc-headers/patches/iptables.patch>

David

Andrew Walrond wrote:

>The addition of a
>	__user
>attribute to a line in
>	linux-2.6.7/include/linux/netfilter_ipv4/ip_tables.h
>causes iptables build to fail unless I export
>	CC="gcc -D__user= "
>
>Presumably ip_tables.h should include a header defining __user, or iptables 
>should include the relevant header before ip_tables.h ?
>
>Sorry if this has already been reported; Archive search found nothing on 
>either ML.
>
>Andrew Walrond
>-
>To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
>the body of a message to majordomo@vger.kernel.org
>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>Please read the FAQ at  http://www.tux.org/lkml/
>  
>

[-- Attachment #2: david+challenge-response.vcf --]
[-- Type: text/x-vcard, Size: 183 bytes --]

begin:vcard
fn:David Ford
n:Ford;David
email;internet:david@blue-labs.org
title:Industrial Geek
tel;home:Ask please
tel;cell:(203) 650-3611
x-mozilla-html:TRUE
version:2.1
end:vcard

Re: Iptables-1.2.9/10 compile failure with linux 2.6.7 headers

[Andrew Walrond]

Hi David,

On Friday 18 Jun 2004 17:10, David Ford wrote:
> Iptables should be using linux-libc-headers headers instead of kernel
> headers.

Is this acquired knowledge, or new Netfilter policy?
How dependant are the iptables tools on the specifc kernel running?

Ie
Can I build iptables for use on 2.6.7 kernel with 2.6.6 linux-libc-headers? 
(probably)

But could I build iptables for 2.6.7 kernel with 2.4.20 linux-libc-headers? 
(probably not?)

The INSTALL file states specifically to use 
KERNEL_DIR=<<where-you-built-your-kernel>>

Andrew

Re: Iptables-1.2.9/10 compile failure with linux 2.6.7 headers

[David Ford]

[-- Attachment #1: Type: text/plain, Size: 988 bytes --]

The current linux libc headers package is much more frequently updated 
and closely matches released kernels.  LLH is a sanitized linux headers 
package and is currently based on 2.6.6 headers.

Yes you can build iptables on 2.6.6 for a 2.6.7 kernel.  I have built 
iptables once or twice a year and built kernels once or twice a week.  
Iptables continues to work fine.

David

Andrew Walrond wrote:

>Hi David,
>
>On Friday 18 Jun 2004 17:10, David Ford wrote:
>  
>
>>Iptables should be using linux-libc-headers headers instead of kernel
>>headers.
>>    
>>
>
>Is this acquired knowledge, or new Netfilter policy?
>How dependant are the iptables tools on the specifc kernel running?
>
>Ie
>Can I build iptables for use on 2.6.7 kernel with 2.6.6 linux-libc-headers? 
>(probably)
>
>But could I build iptables for 2.6.7 kernel with 2.4.20 linux-libc-headers? 
>(probably not?)
>
>The INSTALL file states specifically to use 
>KERNEL_DIR=<<where-you-built-your-kernel>>
>
>Andrew
>  
>

[-- Attachment #2: david+challenge-response.vcf --]
[-- Type: text/x-vcard, Size: 183 bytes --]

begin:vcard
fn:David Ford
n:Ford;David
email;internet:david@blue-labs.org
title:Industrial Geek
tel;home:Ask please
tel;cell:(203) 650-3611
x-mozilla-html:TRUE
version:2.1
end:vcard

Iptables-1.2.9/10 compile failure with linux 2.6.7 headers

[Andrew Walrond]

The addition of a
	__user
attribute to a line in
	linux-2.6.7/include/linux/netfilter_ipv4/ip_tables.h
causes iptables build to fail unless I export
	CC="gcc -D__user= "

Presumably ip_tables.h should include a header defining __user, or iptables 
should include the relevant header before ip_tables.h ?

Sorry if this has already been reported; Archive search found nothing on 
either ML.

Andrew Walrond