I applied (make pending-patches, applied all that would take) iptables 1.2.6 to a new 2.4.18 tree (compiled once to make a working kernel), then did a make KERNEL_DIR=/usr/src/linux-2.4, and a make install KERNEL_DIR=/usr/src/linux-2.4, but when I go to build the kernel, I get the following error (from make modules)
make -C ipv4/netfilter modules make[2]: Entering directory `/usr/src/linux-2.4.18/net/ipv4/netfilter' gcc -D__KERNEL__ -I/usr/src/linux-2.4.18/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fomit-frame-pointer -fno-strict-aliasing -fno-common -pipe -mpreferred-stack-boundary=2 -march=i686 -DMODULE -DMODVERSIONS -include /usr/src/linux-2.4.18/include/linux/modversions.h -DKBUILD_BASENAME=ip_conntrack_standalone -DEXPORT_SYMTAB -c ip_conntrack_standalone.c ip_conntrack_standalone.c: In function `kill_proto': ip_conntrack_standalone.c:41: structure has no member named `dst' ip_conntrack_standalone.c:43: warning: control reaches end of non-void function make[2]: *** [ip_conntrack_standalone.o] Error 1 make[2]: Leaving directory `/usr/src/linux-2.4.18/net/ipv4/netfilter' make[1]: *** [_modsubdir_ipv4/netfilter] Error 2 make[1]: Leaving directory `/usr/src/linux-2.4.18/net' make: *** [_mod_net] Error 2 My only real reason for upgrading iptables from what came in 2.4.18 was to get a version of the iptables utility that wasn't broken (thanks, redhat). I'd happily rebuild the iptables RPM to disable debugging, but it's non-obvious where debugging is enabled in the first place. Any ideas? Thanks, Matt -- Matt Stockdale Sr. NOC Engineer Logicworks
