Mangling IP Options fields
Quinton Hoole
quinton at hoole.biz
Thu May 19 14:58:14 CEST 2005
Hi Jonas
Thanks for your kind offer of help! I assume you meant it ;-) If so,
here goes...
I've been struggling to get a working development platform, and finally
have a Fedora Core 3 system, with kernel-2.6.11-1.14_FC3, which I've
built from source and tested.
Now I try to use patch-o-matic to apply the IPV4OPTSSTRIP patch, but get
the following error:
===================
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?] y
Testing patch base/IPV4OPTSSTRIP.patch...
Warning - no help text file could be found in either
/usr/src/linux/net/ipv4/netfilter/Config.help
or /usr/src/linux/Documentation/Configure.help
fgrep: /usr/src/linux/net/ipv4/netfilter/Config.in: No such file or
directory
Could not find place to slot in Config.in line
TEST FAILED: patch NOT applied.
===================
I installed the kernel source RPM according to the instructions in the
FC3 (http://fedora.redhat.com/docs/release-notes/fc3/x86/), which
places the kernel source in
/usr/src/redhat/BUILD/kernel-2.6.11/linux-2.6.11
For convenience I created a symbolic link from /usr/src/linux to the above.
Then by executing the following I got the error above:
[root at quinton-lap1 patch-o-matic]# KERNEL_DIR=/usr/src/linux ./runme base
What am I doing wrong? Should I be using a standard kernel from
kernel.org, rather than my FC3 kernel?
Q
Jonas Berlin wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Quoting Quinton Hoole on 2005-05-16 12:38 UTC:
>
>
>>Is mangling of IP options fields supported by netfilter/iptables?
>>
>>I've seen Fabrice's reply to a simimlar question some 3 years back:
>>
>>https://lists.netfilter.org/pipermail/netfilter-devel/2002-March/006957.html
>>
>>
>
>I think nothing has changed. The IPV4OPTSSTRIP mentioned in the mail
>(which removes all options) is still available.
>
>You can download the latest pom-ng (through www.netfilter.org), which
>includes IPV4OPTSSTRIP. If you need more help regarding how to do stuff
>in the net/ipv4/netfilter/ipt_IPV4OPTSSTRIP.c file (which is the one you
>should modify), just ask :)
>
>Good luck!
>
>- --
>- - xkr47
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.1 (GNU/Linux)
>
>iD8DBQFCiOnVxyF48ZTvn+4RAj5zAJwKMG2mfElgS26RV2PRwwcIGuYBPwCfdJnv
>RtaGxlBLe/NpODfN5b7zob4=
>=9Bp4
>-----END PGP SIGNATURE-----
>
>
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3244 bytes
Desc: S/MIME Cryptographic Signature
Url : /pipermail/netfilter-devel/attachments/20050519/1924a8e0/smime.bin
More information about the netfilter-devel
mailing list