>From the ipset Download and Install web page I was following these steps: The installation requires the following steps 1. donwload and unpack the sources; 2. run make menuconfig or equivalent in the kernel source directory to preconfigure the kernel 3. run KERNEL_DIR=/where/the/kernel/source ./runme set from the patch-o-matic-n g directory and patch your kernel with the IP set functionality; 4. go back to the kernel source directory, run make oldconfig. Enable the new IP set related options, then compile and install the kernel as usual. 5. run KERNEL_DIR=... make, then KERNEL_DIR=... make install in the iptables source code directory. Similarly to patch-o-matic-ng, you must specify the proper kernel source directory name via the KERNEL_DIR variable. 6. repeat the previous step in the ipset source directory 7. and ready! (I added the number for clarity) I tried it repeatedly. (isn't that the definition of insanity - trying the same thing over and over and expecting different results) I finally got it to work by running make menuconfig in step #4 instead of make oldconfig. I'm not knowledgeable enough to know what the difference is, but it worked! Anyone on this list care to explain? Thank you for your patience - and your help. -----Original Message----- From: Samuel Díaz García [mailto:samueldg@xxxxxxxxxxxx] Sent: Thursday, February 09, 2006 11:50 AM To: Thomas Raef Cc: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: missing ip_set_ipporthash.h I compile fine with 2.6.x (from 2.6.12 to 2.6.15.3 tested). In README says that you need to apply "set" patch from patch-o-matic. I always make kernel, and iptables with "all" patches without problems. Create a link called linux into /usr/src to your kernel sources root (for example "ln -s /usr/src/linux-2.6.15.3 /usr/src/linux) The same with iptables ("ln -s /usr/src/iptables-1.3.5 /usr/src/iptables"). Put your pom-ng directory where you want, cd into your pom-ng directory and do "./runme set" Compile and install your kernel. Disable your iptables boot scripts before reboot ("chkconfig --level 2345 iptables off" under Fedora). Reboot with your new kernel. Goto your iptables sources directory, make and make install. Remember to uninstall your previous iptables package before install the new iptables or rename old binaries/libs/libs directories. The next is go into your ipset-2.2.8 directory and "make clean && make && make install" That's all (as I remember). Good luck. Thomas Raef wrote: > I'm trying to compile ipset-2.2.8 on my Debian Sarge 2.6.15 system I > keep getting: > > linux/netfilter_ipv4/ip_set_ipporthash.h no such file or directory > > When I do: > > Find / -name ip_set_ipporthash.h > > It finds nothing. > > Please help > > Thank you in advance. > > > Thomas J. Raef > e-Based Security, Inc. > www.ebasedsecurity.com > "You're either hardened, or you're hacked!" > > > -- Samuel Díaz García Director Gerente ArcosCom Wireless, S.L.L. CIF: B11828068 c/ Romero Gago, 19 Arcos de la Frontera 11630 - Cadiz http://www.arcoscom.com mailto:samueldg@xxxxxxxxxxxx msn: samueldg@xxxxxxxxxxxx Móvil: 651 93 72 48 Tlfn.: 956 70 13 15 Fax: 956 70 34 83
