Alexander Petrenas <zeracles@xxxxxxxxxxxxxxx> wrote: > Netfilter changes in the recent 4.1.0 kernel update included removal of the BRNF_BRIDGED flag: > http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=40451fd013878b005ccae767dfebc07dfecf85d9 > > Unfortunately, getting rid of BRNF_BRIDGED flag broke the xtables-addons-2.6 package, which now fails to build TARPIT & DELUGE targets with the following errors: > > xtables-addons-2.6/extensions/xt_TARPIT.c:253:30: error: ‘BRNF_BRIDGED’ undeclared (first use in this function) > nskb->nf_bridge->mask & BRNF_BRIDGED)) > ^ > > xtables-addons-2.6/extensions/xt_TARPIT.c:282:2: error: too few arguments to function ‘NF_HOOK’ > NF_HOOK(NFPROTO_IPV4, NF_INET_LOCAL_OUT, nskb, NULL, > ^ NF_HOOK(NFPROTO_IPV4, NF_INET_LOCAL_OUT, NULL, nskb, NULL, > xtables-addons-2.6/extensions/xt_TARPIT.c:397:2: error: too few arguments to function ‘NF_HOOK’ > NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, nskb, NULL, same > My kernel hacking skills are non-existant (as well as my C skills), so I expectedly failed to come up with any patch that would replace BRNF_BRIDGED flag with nf_bridge->physoutdev in the following xt_TARPIT.c code: > > #ifdef CONFIG_BRIDGE_NETFILTER > if (hook != NF_INET_FORWARD || (nskb->nf_bridge != NULL && > nskb->nf_bridge->mask & BRNF_BRIDGED)) > #else if (hook != NF_INET_FORWARD || (nskb->nf_bridge != NULL && nskb->nf_bridge->physoutdev)) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
