Guys I've spend hours trying to figure this, and plenty of Google searches. If anyone can help it would be greatly appreciated. I'm trying to get IPP2P and the layer7-filter to work with iptables 1.2.11 and kernel 2.6.10 on Fedora Core 3. The kernel patches cleanly, compiles just fine and reboots perfectly. The problem is that I can't get iptables to compile. I get the same error message every time I run make: #error including kernel header in userspace; use the glibc headers instead! One suggestion was to compile iptables against /usr/include/linux instead of /usr/src/linux. This worked, but none of my new modules were available. Another suggestion was to edit /usr/src/linux/includes/linux/config.h and comment out the error line with the above message. This worked, I got a compiled and installed iptables, man pages, the works. Problem is that for every rule I try I get the same response from iptables: # iptables -A FORWARD -o eth0 -m ipp2p --ipp2p -j DROP iptables: No chain/target/match by that name # iptables -A FORWARD -o eth0 -m ipp2p --ipp2p -j REJECT iptables: No chain/target/match by that name When I run: # iptables -m ipp2p --help I do get help, leading me to believe that the iptables binary is screwed in some way. Looking in /lib/iptables I can see libipt_ipp2p.so and libipt_layer7.so. The modules exists and both can be loaded. How would I get iptables to compile with my modules without changing (and breaking) the kernel source? I know nothing about C, or C++ so I can't dive in and fix things up myself. Any help would be appreciated. -- Kenneth Kalmer kenneth.kalmer@xxxxxxxxx http://opensourcery.blogspot.com
