[opensuse-buildservice] installing ipsets on SuSE OS
Hi, I tried to install ipsets (http://ipset.netfilter.org/install.html) on my SuSE 10.0 OS. I could apply the kernel patches and rebuild the kernel (Step 1 to 4 on ipsets installation webpage.) But when I tried to build iptables (Step 5,) it showed the error message: /usr/src/linux/include/linux/ipv6.h:19: error: redefinition of `struct in6_pktinfo' In file included from /usr/src/linux/include/linux/netfilter_ipv4.h:11, from /usr/src/linux/include/linux/netfilter_ipv4/ip_tables.h:26, from include/libiptc/libiptc.h:6, from include/iptables.h:5, from extensions/libipt_ah.c:8: /usr/src/linux/include/net/protocol.h:38: warning: `struct sk_buff' declared inside parameter list /usr/src/linux/include/net/protocol.h:38: warning: its scope is only this definition or declaration, which is probably not what you want /usr/src/linux/include/net/protocol.h:39: error: syntax error before "u32" /usr/src/linux/include/net/protocol.h:39: warning: `struct sk_buff' declared inside parameter list /usr/src/linux/include/net/protocol.h:47: warning: `struct sk_buff' declared inside parameter list /usr/src/linux/include/net/protocol.h:52: warning: `struct inet6_skb_parm' declared inside parameter list /usr/src/linux/include/net/protocol.h:52: warning: `struct sk_buff' declared inside parameter list /usr/src/linux/include/net/protocol.h:62: error: field `list' has incomplete type make: *** [extensions/libipt_ah_sh.o] Error 1 I searched on google and found this webpage: http://lists.netfilter.org/pipermail/netfilter/2005-October.txt. It said the kernel source from kernel.org works fine with ipsets, but SuSE's kernel doesn't. If this is true, is there any other way to install ipsets on SuSE 10.0 or 9.3 OS? Thanks for your time. Regards, Hung Lin
2006/6/20, Hung Lin <hlin@nextone.com>:
Hi,
I tried to install ipsets (http://ipset.netfilter.org/install.html) on my SuSE 10.0
This is indeed a very nice feature ..any possibility of adding this to official kernels ?? --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice-help@opensuse.org
Am Wednesday 21 June 2006 06:49 schrieb Cristian Rodriguez:
2006/6/20, Hung Lin <hlin@nextone.com>:
Hi,
I tried to install ipsets (http://ipset.netfilter.org/install.html) on my SuSE 10.0
This is indeed a very nice feature ..any possibility of adding this to official kernels ??
I would like to suggest to build patched kernels in the build service (link home:openvz is doing). It can maybe merged later. bye adrian -- Adrian Schroeter SUSE Linux Products GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany email: adrian@suse.de --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice-help@opensuse.org
Hi, I found the reason why I cannot build ipset with SuSE kernel source: There's a set of SuSE kernel patches (for IPsec) that conflicts with ipset patches: (from series.conf in SuSE kernel source) # These patches are from the netfilter team, and # are required to tag IPsec packets for packet # filtering purposes. - patches.suse/netfilter-02-output-hooks - patches.suse/netfilter-03-input-hooks - patches.suse/netfilter-04-policy-lookup - patches.suse/netfilter-05-policy-checks - patches.suse/netfilter-06-policy-match I didn't apply the above patches and tried to build ipset again, it worked. It's funny that IPsec and ipset are both from netfilter team but they conflict with each other. Please let me know if you have any comment. Thanks. Hung -----Original Message----- From: Adrian Schröter [mailto:adrian@suse.de] Sent: Thursday, June 22, 2006 3:58 AM To: opensuse-buildservice@opensuse.org Subject: Re: [opensuse-buildservice] installing ipsets on SuSE OS Am Wednesday 21 June 2006 06:49 schrieb Cristian Rodriguez:
2006/6/20, Hung Lin <hlin@nextone.com>:
Hi,
I tried to install ipsets (http://ipset.netfilter.org/install.html) on my SuSE 10.0
This is indeed a very nice feature ..any possibility of adding this to official kernels ??
I would like to suggest to build patched kernels in the build service (link home:openvz is doing). It can maybe merged later. bye adrian -- Adrian Schroeter SUSE Linux Products GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany email: adrian@suse.de --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice-help@opensuse.org --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice-help@opensuse.org
On 2006-06-28 15:39:35 -0400, Hung Lin wrote:
I didn't apply the above patches and tried to build ipset again, it worked. It's funny that IPsec and ipset are both from netfilter team but they conflict with each other.
Please let me know if you have any comment. Thanks.
now guess why ipset is not in the mainstream kernel yet. ;) darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-buildservice-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice-help@opensuse.org
participants (4)
-
Adrian Schröter -
Cristian Rodriguez -
Hung Lin -
Marcus Rueckert