On Wed, 30 Mar 2005 13:17:22 +0530, Devesh Agrawal
<devesh.agrawal@xxxxxxxxx> wrote:
> Hi,
> This is in response to a recent post on how to compile a netfilter
> program. It should work for any of the 2.6+ kernels, for 2.4, you will
> have to use ip_route_output_key instead of ip_route_output_flow.
It should be the other way. For 2.4 use ip_route_output_flow instead
of ip_route_output_key.
Cheers,
Vinay
> Regards,
>
> ---------- Forwarded message ----------
> From: Devesh Agrawal <devesh.agrawal@xxxxxxxxx>
> Date: Thu, 24 Mar 2005 10:41:42 +0530
> Subject: Re: how to compile netfiletr hook programs??
> To: Raghu-kisore Neelisetti <neelira@xxxxxxxxxx>
>
> On Mon, 21 Mar 2005 01:07:50 -0600, Raghu-kisore Neelisetti
> <neelira@xxxxxxxxxx> wrote:
> > Hi,
> > i am newbie to linux. I had a tough compiling a simple netfilter hook
> > program (would simply drop the packets). I would appreciate if you could
> > provide me with step by step instructions to compile the netfilter
> > programs. Iam using Fedora core 3 and kernel version is 2.6.9. I would
> > be happy if you cold send make file necessary to compile the code.
> > please let me know i f have to install any thing to be able to use
> > netfilter.
> Have you included these files:
>
> #include <linux/kernel.h>
> #include <linux/module.h>
> #include <linux/init.h>
> #include <linux/netfilter_ipv4.h>
> #include <linux/netdevice.h>
> #include <linux/ip.h>
> #include <linux/inet.h>
> #include <net/checksum.h>
> #include <net/ip.h>
> #include <net/route.h>
> #include <linux/gfp.h>
> #include <linux/skbuff.h>
> #include <linux/icmp.h>
>
> Also you need to declare your handler funx like this :
> nf_hookfn pre_route_handler;
>
> And ofcourse this:
> struct nf_hook_ops pre_route = {
> {NULL, NULL},
> pre_route_handler,
> THIS_MODULE,
> PF_INET,
> NF_IP_PRE_ROUTING,
> NF_IP_PRI_FIRST,
> };
> unsigned int pre_route_handler(unsigned int hooknum,
> struct sk_buff **skb,
> const struct net_device *in,
> const struct net_device *out,
> int (*okfn)(struct sk_buff *)){return NF_DROP;}
>
> And then the standard procedure of make -C $(KERN_DIR) SUBDIRS=$PWD
> modules, make sure that in your $(KERN_DIR), you have done make config
> or something equivalent.
> Hope this helps.
>
> Regards,
> Devesh Agrawal
>
> >
> > Thanks in advance.
> > raghu.
> >
> >
>
> --
> Devesh Agrawal
> ==============
> The program is absolutely right;
> therefore the computer must be wrong.
> -----------------
> How an engineer writes a program:
> Start by debugging an empty file...
> ----------------------
> Systems programmers are the high priests of a low cult. - R. S. Barton
>
> --
> Kernelnewbies: Help each other learn about the Linux kernel.
> Archive: http://mail.nl.linux.org/kernelnewbies/
> FAQ: http://kernelnewbies.org/faq/
>
>
--
"Debugging is twice as hard as writing the code in the first place.
Therefore, if you write the code as cleverly as possible, you are,
by definition, not smart enough to debug it." - Brian W. Kernighan
--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive: http://mail.nl.linux.org/kernelnewbies/
FAQ: http://kernelnewbies.org/faq/
