[LARTC] layer7-filter with iptables problem

2004-02-02 Thread hare ram
Hi

iam running FEDORA,

i have installed Source of iptable 1.2.9 with the patch  layer7-iptables
patch done with out any errors

and i applied patch in kernel to the layer 7 patch

and i have select the required option by doing

 make menyconfig
done

make dep
make bzImage
make modules
make modules_install
make install

and rebooted with customer kernel

when i type

iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j
MARK --set-mark 1
iptables v1.2.9: Couldn't load match
`layer7':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared object
file: No such file or directory


when i try to do manual compile, iam getting this error

cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include -Iinclude/
 -DIPTABLES_VERSION=\1.2.9\  -fPIC -o extensions/libipt_layer7_sh.o -c
extensions/libipt_layer7.c


extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h: No such
file or directory
extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info' declared
inside parameter list
extensions/libipt_layer7.c:52: warning: its scope is only this definition or
declaration, which is probably not what you want
extensions/libipt_layer7.c: In function `parse_protocol_file':
extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN' undeclared (first
use in this function)
extensions/libipt_layer7.c:84: error: (Each undeclared identifier is
reported only once
extensions/libipt_layer7.c:84: error: for each function it appears in.)
extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN' undeclared (first
use in this function)
extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c: At top level:
extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info' declared
inside parameter list
extensions/libipt_layer7.c: In function `parse_layer7_protocol':
extensions/libipt_layer7.c:246: warning: passing arg 3 of
`parse_protocol_file' from incompatible pointer type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN' undeclared (first
use in this function)
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c: In function `parse':
extensions/libipt_layer7.c:278: warning: passing arg 2 of
`parse_layer7_protocol' from incompatible pointer type
extensions/libipt_layer7.c:280: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c: In function `print':
extensions/libipt_layer7.c:325: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:326: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c: In function `save':
extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete
type
extensions/libipt_layer7.c: At top level:
extensions/libipt_layer7.c:340: error: invalid application of `sizeof' to an
incomplete type
extensions/libipt_layer7.c:341: error: invalid application of `sizeof' to an
incomplete type


any help will be apprciate

hare

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


Re: [LARTC] layer7-filter with iptables problem

2004-02-02 Thread hare ram
Hello

sorry continuation to the last mail

when make menuconfig
iam not able to see this options tooo

Layer 7 match support and Child Level match support.

but i followed the proceedures mentioned in the docs

but i could not find this option
where did i went wrong.. iam not sure
some one guide me

hare
- Original Message - 
From: hare ram [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, February 02, 2004 12:35 PM
Subject: [LARTC] layer7-filter with iptables problem


 Hi

 iam running FEDORA,

 i have installed Source of iptable 1.2.9 with the patch  layer7-iptables
 patch done with out any errors

 and i applied patch in kernel to the layer 7 patch

 and i have select the required option by doing

  make menyconfig
 done

 make dep
 make bzImage
 make modules
 make modules_install
 make install

 and rebooted with customer kernel

 when i type

 iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j
 MARK --set-mark 1
 iptables v1.2.9: Couldn't load match
 `layer7':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared
object
 file: No such file or directory


 when i try to do manual compile, iam getting this error


cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include -Iinclude/
  -DIPTABLES_VERSION=\1.2.9\  -fPIC -o extensions/libipt_layer7_sh.o -c
 extensions/libipt_layer7.c


 extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h: No
such
 file or directory
 extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info' declared
 inside parameter list
 extensions/libipt_layer7.c:52: warning: its scope is only this definition
or
 declaration, which is probably not what you want
 extensions/libipt_layer7.c: In function `parse_protocol_file':
 extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN' undeclared (first
 use in this function)
 extensions/libipt_layer7.c:84: error: (Each undeclared identifier is
 reported only once
 extensions/libipt_layer7.c:84: error: for each function it appears in.)
 extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN' undeclared (first
 use in this function)
 extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c: At top level:
 extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info' declared
 inside parameter list
 extensions/libipt_layer7.c: In function `parse_layer7_protocol':
 extensions/libipt_layer7.c:246: warning: passing arg 3 of
 `parse_protocol_file' from incompatible pointer type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN' undeclared (first
 use in this function)
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c: In function `parse':
 extensions/libipt_layer7.c:278: warning: passing arg 2 of
 `parse_layer7_protocol' from incompatible pointer type
 extensions/libipt_layer7.c:280: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c: In function `print':
 extensions/libipt_layer7.c:325: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:326: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c: In function `save':
 extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete
 type
 extensions/libipt_layer7.c: At top level:
 extensions/libipt_layer7.c:340: error: invalid application of `sizeof' to
an
 incomplete type
 extensions/libipt_layer7.c:341: error: invalid application of `sizeof' to
an
 incomplete type


 any help will be apprciate

 hare

 ___
 LARTC mailing list / [EMAIL PROTECTED]
 http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


Re: [LARTC] layer7-filter with iptables problem

2004-02-02 Thread hare ram
Hi

thanks for the quick reply

iam using the following things

iptables-1.2.9-layer7-0.4.1.patch
layer7-kernel2.4patch-qos-0.4.1b



i did the proceedure

[EMAIL PROTECTED] linux-2.4.22-1.2115.nptl]# patch -p1 
/root/update/layer7-kernel2.4patch-qos-0.4.1b
patching file Documentation/Configure.help
Hunk #1 succeeded at 10626 (offset 283 lines).
patching file include/linux/netfilter_ipv4/ip_conntrack.h
Hunk #1 succeeded at 190 (offset 1 line).
patching file include/linux/pkt_cls.h
patching file net/ipv4/netfilter/Config.in
patching file net/sched/Config.in
patching file net/sched/Makefile
patching file net/sched/cls_api.c
patching file net/sched/cls_layer7.c
patching file net/sched/regexp/regerror.c
patching file net/sched/regexp/regexp.c
patching file net/sched/regexp/regexp.h
patching file net/sched/regexp/regmagic.h
patching file net/sched/regexp/regsub.c
[EMAIL PROTECTED] linux-2.4.22-1.2115.nptl]#
[EMAIL PROTECTED] linux-2.4.22-1.2115.nptl]#


iptables patching

[EMAIL PROTECTED] iptables-1.2.9]# patch -p1 
../iptables-1.2.9-layer7-0.4.1.patch.1
patching file extensions/.childlevel-test
patching file extensions/.layer7-test
patching file extensions/libipt_childlevel.c
patching file extensions/libipt_layer7.c
patching file iptables.8


chmod +x extensions/.layer7-test extensions/.childlevel-test

make KERNEL_DIR=/usr/src/linux-2.4.22-1.2115.nptl
make install KERNEL_DIR=/usr/src/linux-2.4.22-1.2115.nptl

iam not able to find the ipt_layer.h file
and iam not able to see the menus in when i make .. make menuconfig

hare


- Original Message - 
From: Nabil SEFRIOUI [EMAIL PROTECTED]
To: hare ram [EMAIL PROTECTED]; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, February 03, 2004 8:38 AM
Subject: Re: [LARTC] layer7-filter with iptables problem


try patching and installing kernel before iptables

Le Lundi 02 Février 2004 07:05, hare ram a écrit :
 Hi

 iam running FEDORA,

 i have installed Source of iptable 1.2.9 with the patch
 layer7-iptables patch done with out any errors

 and i applied patch in kernel to the layer 7 patch

 and i have select the required option by doing

  make menyconfig
 done

 make dep
 make bzImage
 make modules
 make modules_install
 make install

 and rebooted with customer kernel

 when i type

 iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j
 MARK --set-mark 1
 iptables v1.2.9: Couldn't load match
 `layer7':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared
 object file: No such file or directory


 when i try to do manual compile, iam getting this error

 cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include
 -Iinclude/ -DIPTABLES_VERSION=\1.2.9\  -fPIC -o
 extensions/libipt_layer7_sh.o -c extensions/libipt_layer7.c


 extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h:
 No such file or directory
 extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info'
 declared inside parameter list
 extensions/libipt_layer7.c:52: warning: its scope is only this
 definition or declaration, which is probably not what you want
 extensions/libipt_layer7.c: In function `parse_protocol_file':
 extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN' undeclared
 (first use in this function)
 extensions/libipt_layer7.c:84: error: (Each undeclared identifier is
 reported only once
 extensions/libipt_layer7.c:84: error: for each function it appears
 in.) extensions/libipt_layer7.c:87: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:87: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:87: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN' undeclared
 (first use in this function)
 extensions/libipt_layer7.c:95: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:95: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:95: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c: At top level:
 extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info'
 declared inside parameter list
 extensions/libipt_layer7.c: In function `parse_layer7_protocol':
 extensions/libipt_layer7.c:246: warning: passing arg 3 of
 `parse_protocol_file' from incompatible pointer type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN' undeclared
 (first use in this function)
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions/libipt_layer7.c:264: error: dereferencing pointer to
 incomplete type
 extensions