iptables l7模块安装问题

yxinjian

原帖由 ssffzz1 于 2008-8-29 16:51 发表
L7要和IPTABLES配套的。看看L7的发行文档。是否和IPTABLES配套。

应该是匹配的 l7的软件包里包含了iptables-1.4.1.1 的补丁
是不是内核必须是2.6.25的才可以啊？这里面只有一个2.6.25的内核补丁

下面是l7补丁

CHANGELOG
for_older_kernels
iptables-1.3-for-kernel-2.6.20forward-layer7-2.20.patch
iptables-1.3-for-kernel-pre2.6.20-layer7-2.20.patch
iptables-1.4.1.1-for-kernel-2.6.20forward
iptables-1.4-for-kernel-2.6.20forward-layer7-2.20.patch
kernel-2.4-layer7-2.20.patch
kernel-2.6.25-layer7-2.20.patch
README

yxinjian

问一下
我能执行

iptables -t mangle -A PREROUTING -m layer7 --l7proto yahoo -j DROP

是不是说明我的iptables支持了l7模块呢？

ssffzz1

要不报错才行

donggua0713

1.4.1.1的iptables不是你这样编译的，把NET？？？这个包里头有两个文件CP到iptables源码的e？？？？这个文件夹里面，然后
PATHC the iptables l7-patch
./configure kernel=/you kernel path (记不清了）
make
make install

前天刚编译过
kernel :2.6.25.16
iptables:1.4.2

[ 本帖最后由 donggua0713 于 2008-8-30 10:17 编辑 ]

donggua0713

http://l7-filter.sourceforge.net/HOWTO-kernel.en.php









Iptables Setup

First read the README in the package "Layer 7 patches". Depending on your version of iptables, the instructions are different.
iptables 1.4.0 and older

Use the appropriate iptables patch to to patch[1] iptables. Compile iptables, pointing it at your patched kernel source:

    * Run "chmod +x extensions/.layer7-test" (information about file permissions can't be contained in the patch)
    * Then "make KERNEL_DIR=/path/to/patched/kernel_source" (you must have configured your kernel source before this step)
    * And install (as root): "make install KERNEL_DIR=/path/to/patched/kernel_source"

iptables 1.4.1

Don't use this version. There's no reason to and it's difficult to compile.
iptables 1.4.1.1 and newer

Copy libxt_layer7.c and libxt_layer7.man (from the subdirectory of the "Layer 7 patches" package that the README points you to) to the extensions/ directory of your iptables source. Then:

    * "./configure --with-ksource=/path/to/patched/kernel_source" (use the full path)
    * "make"
    * (as root) "make install"

[ 本帖最后由 donggua0713 于 2008-8-30 10:18 编辑 ]

yxinjian

谢谢，大家的帮助，问题解决了~！

wangpenghua

如何解决的报一下啊，不能只有你明白了广大群众还未知呢