Mangling IP Options fields

Quinton Hoole quinton at hoole.biz
Thu May 19 14:58:14 CEST 2005


Hi Jonas

Thanks for your kind offer of help! I assume you meant it ;-)  If so, 
here goes...

I've been struggling to get a working development platform, and finally 
have a Fedora Core 3 system, with kernel-2.6.11-1.14_FC3, which I've 
built from source and tested.

Now I try to use patch-o-matic to apply the IPV4OPTSSTRIP patch, but get 
the following error:
===================
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?] y
Testing patch base/IPV4OPTSSTRIP.patch...
Warning - no help text file could be found in either
/usr/src/linux/net/ipv4/netfilter/Config.help
or /usr/src/linux/Documentation/Configure.help
fgrep: /usr/src/linux/net/ipv4/netfilter/Config.in: No such file or 
directory
Could not find place to slot in Config.in line
TEST FAILED: patch NOT applied.
===================

I installed the kernel source RPM according to the instructions in the 
FC3  (http://fedora.redhat.com/docs/release-notes/fc3/x86/), which 
places  the kernel source in

/usr/src/redhat/BUILD/kernel-2.6.11/linux-2.6.11

For convenience I  created a symbolic link from /usr/src/linux to the above.

Then by executing the following I got the error above:
[root at quinton-lap1 patch-o-matic]# KERNEL_DIR=/usr/src/linux ./runme base

What am I doing wrong?  Should I be using a standard kernel from 
kernel.org, rather than my FC3 kernel?

Q
 

Jonas Berlin wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Quoting Quinton Hoole on 2005-05-16 12:38 UTC:
>  
>
>>Is mangling of IP options fields supported by netfilter/iptables?
>>
>>I've seen Fabrice's reply to a simimlar question some 3 years back:
>>
>>https://lists.netfilter.org/pipermail/netfilter-devel/2002-March/006957.html
>>    
>>
>
>I think nothing has changed. The IPV4OPTSSTRIP mentioned in the mail
>(which removes all options) is still available.
>
>You can download the latest pom-ng (through www.netfilter.org), which
>includes IPV4OPTSSTRIP. If you need more help regarding how to do stuff
>in the net/ipv4/netfilter/ipt_IPV4OPTSSTRIP.c file (which is the one you
>should modify), just ask :)
>
>Good luck!
>
>- --
>- - xkr47
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.1 (GNU/Linux)
>
>iD8DBQFCiOnVxyF48ZTvn+4RAj5zAJwKMG2mfElgS26RV2PRwwcIGuYBPwCfdJnv
>RtaGxlBLe/NpODfN5b7zob4=
>=9Bp4
>-----END PGP SIGNATURE-----
>
>
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3244 bytes
Desc: S/MIME Cryptographic Signature
Url : /pipermail/netfilter-devel/attachments/20050519/1924a8e0/smime.bin


More information about the netfilter-devel mailing list