problems applying ipset patch

[Jozsef Kadlecsik]

On Thu, 24 May 2007, Andrea wrote:

> Henrik Nordstrom ha scritto:
>>> 
>>> http://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot/patch-o-matic-ng-20070523.tar.bz2
>> 
>> Should be fine. That snapshot is 10.5 hours old, and Jozsef's changed
>> ipset 25 hours ago.
>> 
>> If in doubt verify that
>> patchlets/set/linux-2.6/net/ipv4/netfilter/ipt_SET.c is modified
>> yesterday after unpacking the snapshot.
>>
>>   ls -l patchlets/set/linux-2.6/net/ipv4/netfilter/ipt_SET.c
>
> I've just patched with patch-o-matic-ng-20070524.tar.bz2. So my config is:
>
> -linux-2.6.21.1.tar.bz2
> -patch-o-matic-ng-20070524.tar.bz2
> -iptables-1.3.7.tar.bz2
> -ipset-2.2.9a-20061009.tar.bz2  (maybe too old?)

That's good. (There was no need to fix the userspace tool since then.)

> Waiting compile-phase done, some questions:
>
> - in make oldconfig I've set ipsets entries as modules (m): am I right?

Fine.

> - do I need to uninstall iptables before patch-compile-reinstall new version 
> of iptables?

No, 'make install' will overwrite existing shared libraries and binaries. 
Just make sure you use the correct iptables binary if you have got one 
installed in another directory, too, from your distribution.

Best regards,
Jozsef
-
E-mail  : kadlec at blackhole.kfki.hu, kadlec at sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
           H-1525 Budapest 114, POB. 49, Hungary