Modify

Opened 5 years ago

Closed 5 years ago

#12404 closed task (fixed)

iptables should be updated to linux kernel 3.5+ compatible version

Reported by: Tóth F. János <janos666@…> Owned by: developers
Priority: high Milestone: Chaos Calmer 15.05
Component: packages Version: Trunk
Keywords: Cc:

Description

I got this error during building OpenWRT [34055] with kernel 3.6.5:

iptables-1.4.10/include/libipq/libipq.h:33:43: fatal error: linux/netfilter_ipv4/ip_queue.h: No such file or directory

And I found this:

http://comments.gmane.org/gmane.comp.security.firewalls.netfilter.devel/43606

{{{> > iptables 1.4.15

This release includes support for new features now present in the
Linux kernel 3.5 and one major bugfix (that shows up with gcc-4.7).

Hm but 3.5 doesn't contain ip_queue.h anymore:

}}}

Attachments (1)

900-add-missing-netfilter_ipv4_ip_queue_h.patch (2.5 KB) - added by raver@… 5 years ago.

Download all attachments as: .zip

Change History (6)

comment:1 Changed 5 years ago by raver@…

I had this problem too. Meanwhile I created a patch based on http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=ad8858c0d3ef875e2c118ebcc69487070fb87f72 and it's working.
You may put the attached file in ~/openwrt/trunk/package/network/utils/iptables/patches/.

Changed 5 years ago by raver@…

comment:2 Changed 5 years ago by anonymous

Thank you for the patch, it works. But I think it's a good time to update the iptables package anyway.

comment:3 Changed 5 years ago by raver@…

Thanks nbd, It's fixed by r34069.
No build errors messages and the submitted patch is no longer needed.

comment:4 Changed 5 years ago by pkreiner@…

Note that the change in r34069 removes libipq.h completely, which breaks compilation of both the "dsl-qos-queue" and "peerguardian" packages that depend on libipq.

Since the comments at http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=ad8858c0d3ef875e2c118ebcc69487070fb87f72 indicate that libipq is probably gone for good from kernels 3.5+, then the dsl-qos-queue and peerguardian packages should be disabled as well (or check to see if upstream has updated code that doesn't depend on libipq). Right now compiling either one will fail.

comment:5 Changed 5 years ago by nbd

  • Resolution set to fixed
  • Status changed from new to closed

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.