2.3 kernel needed for IP tables?

[William Stearns]

Good evening, Mike,

On Sat, 8 Apr 2000, mike wrote:

> Do I need to use a 2.3 kernel to utilize IP tables or can I apply a
> patch to a 2.2.14 kernel?

	The short answer is yes, you do need to use a 2.3 kernel to use
iptables.  At one point there were patches for 2.2, but even if you could
find them and get them to apply correctly to current 2.2 kernels, the
syntax used in iptables has changed since then and a number of new
features have been added.
	Iptables 1.0.0 with kernel 2.3.99-pre3 with all the iptables
features as modules (with the following patch, courtesy of Marc Boucher)
seems to be working reasonably well at this point.
	Cheers,
	- Bill


--- linux-2.3.99-pre2-4-official/net/netsyms.c  Sat Mar 18 22:14:16 2000
+++ linux-2.3.99-pre2-4-nf/net/netsyms.c        Sat Mar 18 23:09:15 2000
@@ -258,6 +258,9 @@
 /* needed for ip_gre -cw */
 EXPORT_SYMBOL(ip_statistics);
+/* needed for ipt_REJECT */
+EXPORT_SYMBOL(tcp_v4_send_reset);
+
 #ifdef CONFIG_DLCI_MODULE
 extern int (*dlci_ioctl_hook)(unsigned int, void *);
 EXPORT_SYMBOL(dlci_ioctl_hook);
@@ -340,7 +343,6 @@
 EXPORT_SYMBOL(tcp_v4_rebuild_header);
 EXPORT_SYMBOL(tcp_v4_send_check);
 EXPORT_SYMBOL(tcp_v4_conn_request);
-EXPORT_SYMBOL(tcp_v4_send_reset);
 EXPORT_SYMBOL(tcp_create_openreq_child);
 EXPORT_SYMBOL(tcp_bucket_create);
 EXPORT_SYMBOL(__tcp_put_port);




---------------------------------------------------------------------------
	"Bastard Operators from Hell" anagrams to "Shatterproof Armored Balls"
(Courtesy of Jens Benecke <jens@pinguin.conetix.de>)
--------------------------------------------------------------------------
William Stearns (wstearns@pobox.com).  Mason, Buildkernel, named2hosts, 
and ipfwadm2ipchains are at:                http://www.pobox.com/~wstearns
LinuxMonth; articles for Linux Enthusiasts! http://www.linuxmonth.com
--------------------------------------------------------------------------