Hi iam running FEDORA, i have installed Source of iptable 1.2.9 with the patch layer7-iptables patch done with out any errors and i applied patch in kernel to the layer 7 patch and i have select the required option by doing make menyconfig done make dep make bzImage make modules make modules_install make install and rebooted with customer kernel when i type iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j MARK --set-mark 1 iptables v1.2.9: Couldn''t load match `layer7'':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared object file: No such file or directory when i try to do manual compile, iam getting this error cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.9\" -fPIC -o extensions/libipt_layer7_sh.o -c extensions/libipt_layer7.c extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h: No such file or directory extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info'' declared inside parameter list extensions/libipt_layer7.c:52: warning: its scope is only this definition or declaration, which is probably not what you want extensions/libipt_layer7.c: In function `parse_protocol_file'': extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN'' undeclared (first use in this function) extensions/libipt_layer7.c:84: error: (Each undeclared identifier is reported only once extensions/libipt_layer7.c:84: error: for each function it appears in.) extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN'' undeclared (first use in this function) extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c: At top level: extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info'' declared inside parameter list extensions/libipt_layer7.c: In function `parse_layer7_protocol'': extensions/libipt_layer7.c:246: warning: passing arg 3 of `parse_protocol_file'' from incompatible pointer type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN'' undeclared (first use in this function) extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c: In function `parse'': extensions/libipt_layer7.c:278: warning: passing arg 2 of `parse_layer7_protocol'' from incompatible pointer type extensions/libipt_layer7.c:280: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c: In function `print'': extensions/libipt_layer7.c:325: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:326: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c: In function `save'': extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete type extensions/libipt_layer7.c: At top level: extensions/libipt_layer7.c:340: error: invalid application of `sizeof'' to an incomplete type extensions/libipt_layer7.c:341: error: invalid application of `sizeof'' to an incomplete type any help will be apprciate hare
Hello sorry continuation to the last mail when make menuconfig iam not able to see this options tooo "Layer 7 match support" and "Child Level match support". but i followed the proceedures mentioned in the docs but i could not find this option where did i went wrong.. iam not sure some one guide me hare ----- Original Message ----- From: "hare ram" <hareram@sol.net.in> To: <lartc@mailman.ds9a.nl> Cc: <netfilter@lists.samba.org> Sent: Monday, February 02, 2004 12:35 PM Subject: [LARTC] layer7-filter with iptables problem> Hi > > iam running FEDORA, > > i have installed Source of iptable 1.2.9 with the patch layer7-iptables > patch done with out any errors > > and i applied patch in kernel to the layer 7 patch > > and i have select the required option by doing > > make menyconfig > done > > make dep > make bzImage > make modules > make modules_install > make install > > and rebooted with customer kernel > > when i type > > iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j > MARK --set-mark 1 > iptables v1.2.9: Couldn''t load match > `layer7'':/usr/local/lib/iptables/libipt_layer7.so: cannot open sharedobject> file: No such file or directory > > > when i try to do manual compile, iam getting this error > >cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include -Iinclude/> -DIPTABLES_VERSION=\"1.2.9\" -fPIC -o extensions/libipt_layer7_sh.o -c > extensions/libipt_layer7.c > > > extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h: Nosuch> file or directory > extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info'' declared > inside parameter list > extensions/libipt_layer7.c:52: warning: its scope is only this definitionor> declaration, which is probably not what you want > extensions/libipt_layer7.c: In function `parse_protocol_file'': > extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN'' undeclared (first > use in this function) > extensions/libipt_layer7.c:84: error: (Each undeclared identifier is > reported only once > extensions/libipt_layer7.c:84: error: for each function it appears in.) > extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:87: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN'' undeclared (first > use in this function) > extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:95: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c: At top level: > extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info'' declared > inside parameter list > extensions/libipt_layer7.c: In function `parse_layer7_protocol'': > extensions/libipt_layer7.c:246: warning: passing arg 3 of > `parse_protocol_file'' from incompatible pointer type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN'' undeclared (first > use in this function) > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:264: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c: In function `parse'': > extensions/libipt_layer7.c:278: warning: passing arg 2 of > `parse_layer7_protocol'' from incompatible pointer type > extensions/libipt_layer7.c:280: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c: In function `print'': > extensions/libipt_layer7.c:325: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:326: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c: In function `save'': > extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c:334: error: dereferencing pointer to incomplete > type > extensions/libipt_layer7.c: At top level: > extensions/libipt_layer7.c:340: error: invalid application of `sizeof'' toan> incomplete type > extensions/libipt_layer7.c:341: error: invalid application of `sizeof'' toan> incomplete type > > > any help will be apprciate > > hare > > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ >_______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
try patching and installing kernel before iptables Le Lundi 02 Février 2004 07:05, hare ram a écrit :> Hi > > iam running FEDORA, > > i have installed Source of iptable 1.2.9 with the patch > layer7-iptables patch done with out any errors > > and i applied patch in kernel to the layer 7 patch > > and i have select the required option by doing > > make menyconfig > done > > make dep > make bzImage > make modules > make modules_install > make install > > and rebooted with customer kernel > > when i type > > iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j > MARK --set-mark 1 > iptables v1.2.9: Couldn''t load match > `layer7'':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared > object file: No such file or directory > > > when i try to do manual compile, iam getting this error > > cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include > -Iinclude/ -DIPTABLES_VERSION=\"1.2.9\" -fPIC -o > extensions/libipt_layer7_sh.o -c extensions/libipt_layer7.c > > > extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h: > No such file or directory > extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info'' > declared inside parameter list > extensions/libipt_layer7.c:52: warning: its scope is only this > definition or declaration, which is probably not what you want > extensions/libipt_layer7.c: In function `parse_protocol_file'': > extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN'' undeclared > (first use in this function) > extensions/libipt_layer7.c:84: error: (Each undeclared identifier is > reported only once > extensions/libipt_layer7.c:84: error: for each function it appears > in.) extensions/libipt_layer7.c:87: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:87: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:87: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN'' undeclared > (first use in this function) > extensions/libipt_layer7.c:95: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:95: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:95: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: At top level: > extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info'' > declared inside parameter list > extensions/libipt_layer7.c: In function `parse_layer7_protocol'': > extensions/libipt_layer7.c:246: warning: passing arg 3 of > `parse_protocol_file'' from incompatible pointer type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN'' undeclared > (first use in this function) > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: In function `parse'': > extensions/libipt_layer7.c:278: warning: passing arg 2 of > `parse_layer7_protocol'' from incompatible pointer type > extensions/libipt_layer7.c:280: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: In function `print'': > extensions/libipt_layer7.c:325: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:326: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: In function `save'': > extensions/libipt_layer7.c:334: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:334: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: At top level: > extensions/libipt_layer7.c:340: error: invalid application of > `sizeof'' to an incomplete type > extensions/libipt_layer7.c:341: error: invalid application of > `sizeof'' to an incomplete type > > > any help will be apprciate > > hare > > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: > http://lartc.org/-- __________________________________ Osmium Work - Ingénierie Open Source http://www.osmium-work.com/
Hi thanks for the quick reply iam using the following things iptables-1.2.9-layer7-0.4.1.patch layer7-kernel2.4patch-qos-0.4.1b i did the proceedure [root@pdn linux-2.4.22-1.2115.nptl]# patch -p1 < /root/update/layer7-kernel2.4patch-qos-0.4.1b patching file Documentation/Configure.help Hunk #1 succeeded at 10626 (offset 283 lines). patching file include/linux/netfilter_ipv4/ip_conntrack.h Hunk #1 succeeded at 190 (offset 1 line). patching file include/linux/pkt_cls.h patching file net/ipv4/netfilter/Config.in patching file net/sched/Config.in patching file net/sched/Makefile patching file net/sched/cls_api.c patching file net/sched/cls_layer7.c patching file net/sched/regexp/regerror.c patching file net/sched/regexp/regexp.c patching file net/sched/regexp/regexp.h patching file net/sched/regexp/regmagic.h patching file net/sched/regexp/regsub.c [root@pdn linux-2.4.22-1.2115.nptl]# [root@pdn linux-2.4.22-1.2115.nptl]# iptables patching [root@pdn iptables-1.2.9]# patch -p1 < ../iptables-1.2.9-layer7-0.4.1.patch.1 patching file extensions/.childlevel-test patching file extensions/.layer7-test patching file extensions/libipt_childlevel.c patching file extensions/libipt_layer7.c patching file iptables.8 chmod +x extensions/.layer7-test extensions/.childlevel-test make KERNEL_DIR=/usr/src/linux-2.4.22-1.2115.nptl make install KERNEL_DIR=/usr/src/linux-2.4.22-1.2115.nptl iam not able to find the ipt_layer.h file and iam not able to see the menus in when i make .. make menuconfig hare ----- Original Message ----- From: "Nabil SEFRIOUI" <admin@osmium-work.com> To: "hare ram" <hareram@sol.net.in>; <lartc@mailman.ds9a.nl> Cc: <netfilter@lists.samba.org> Sent: Tuesday, February 03, 2004 8:38 AM Subject: Re: [LARTC] layer7-filter with iptables problem try patching and installing kernel before iptables Le Lundi 02 Février 2004 07:05, hare ram a écrit :> Hi > > iam running FEDORA, > > i have installed Source of iptable 1.2.9 with the patch > layer7-iptables patch done with out any errors > > and i applied patch in kernel to the layer 7 patch > > and i have select the required option by doing > > make menyconfig > done > > make dep > make bzImage > make modules > make modules_install > make install > > and rebooted with customer kernel > > when i type > > iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j > MARK --set-mark 1 > iptables v1.2.9: Couldn''t load match > `layer7'':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared > object file: No such file or directory > > > when i try to do manual compile, iam getting this error > > cc -O2 -Wall -Wunused -I/usr/src/linux-2.4.22-1.2115.nptl/include > -Iinclude/ -DIPTABLES_VERSION=\"1.2.9\" -fPIC -o > extensions/libipt_layer7_sh.o -c extensions/libipt_layer7.c > > > extensions/libipt_layer7.c:21:45: linux/netfilter_ipv4/ipt_layer7.h: > No such file or directory > extensions/libipt_layer7.c:52: warning: `struct ipt_layer7_info'' > declared inside parameter list > extensions/libipt_layer7.c:52: warning: its scope is only this > definition or declaration, which is probably not what you want > extensions/libipt_layer7.c: In function `parse_protocol_file'': > extensions/libipt_layer7.c:84: error: `MAX_PROTOCOL_LEN'' undeclared > (first use in this function) > extensions/libipt_layer7.c:84: error: (Each undeclared identifier is > reported only once > extensions/libipt_layer7.c:84: error: for each function it appears > in.) extensions/libipt_layer7.c:87: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:87: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:87: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:93: error: `MAX_PATTERN_LEN'' undeclared > (first use in this function) > extensions/libipt_layer7.c:95: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:95: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:95: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: At top level: > extensions/libipt_layer7.c:219: warning: `struct ipt_layer7_info'' > declared inside parameter list > extensions/libipt_layer7.c: In function `parse_layer7_protocol'': > extensions/libipt_layer7.c:246: warning: passing arg 3 of > `parse_protocol_file'' from incompatible pointer type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: `MAX_PATTERN_LEN'' undeclared > (first use in this function) > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:264: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: In function `parse'': > extensions/libipt_layer7.c:278: warning: passing arg 2 of > `parse_layer7_protocol'' from incompatible pointer type > extensions/libipt_layer7.c:280: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: In function `print'': > extensions/libipt_layer7.c:325: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:326: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: In function `save'': > extensions/libipt_layer7.c:334: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c:334: error: dereferencing pointer to > incomplete type > extensions/libipt_layer7.c: At top level: > extensions/libipt_layer7.c:340: error: invalid application of > `sizeof'' to an incomplete type > extensions/libipt_layer7.c:341: error: invalid application of > `sizeof'' to an incomplete type > > > any help will be apprciate > > hare > > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: > http://lartc.org/-- __________________________________ Osmium Work - Ingénierie Open Source http://www.osmium-work.com/