This is an old revision of the document!


Playing with netfiltering-l7 and ipp2p under Debian (Sarge)

Problem: Debian + patched kernel as debian package + patched iptables with latest netfilter-l7 and ipp2p patches.

need some more restyling

Get the source!

apt-get source iptables (take it from debian-packports 1.3.3x)

get ipp2p source get netfilter-l7 source

untar iptables source from upstream and patch it with netfilter-l7-iptables patch. Create a .tgz and put it back at the same location.

untar patch-o-matic stuff .. put ipp2p stuff there ..

.. more to come

Another way to do it

FIXME Need some styling

I downloaded the source package for iptables v1.3.5 and copied the source in '/usr/src/iptables-1.3.5.0debian1. Install the iptables-dev package (although I think it's not necessary if you install the iptables source package). You'll need the kernel-headers package too. I sent you my Makefile. With this setup you just need to do make in the directory where the sources are. If you succeed, you will find a dynamic library libipt_ipp2p.so, which you'll have to copy to /lib/iptables/ and a kernel module called ipt_ipp2p.ko (supposing you have a 2.6.x kernel in your system). Copy ipt_ipp2p.ko in /lib/modules/<your_kernel_version>/kernel/net/ipv4/netfilter/ipt_ipp2p.ko and type depmod -a''.

Try loading the module with modprobe ipt_ipp2p. If everything is OK try the following command:

 iptables -m ipp2p --help

You should see some info about the usage of this module.

Thanks to Abel Martín at debian-firewall mailinglist.

linux/iptables/l7patch.1162573398.txt.gz · Last modified: 2009/05/25 00:34 (external edit)
CC Attribution-Share Alike 4.0 International
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0 ipv6 ready