Re: ipfilter 4.1.31 - Centos Linux 5.2

David Stes wrote:
> I'm not sure this is the proper solution, but the way I think you're
> supposed to compile the proxies is by modifying
> 
> 	ip_proxy.c
> 
> and by moving
> 
> 	#include "ip_rcmd_pxy.c"
> 
> a few lines higher, above 
> 
> 	/* END OF INCLUDES */
> 
> because the Makefile's scan for that comment and generate sources based on it.
> 
> 
> On Thu, Aug 21, 2008 at 03:36:29PM -0400, Steve Clark wrote:
> 
>>Hi,
>>
>>I have gotten 4.1.31 to compile an run on centos 5.2 linux kernel 2.6.18-92.1.10.el5.
>>
>>It seems to be mostly working ok after some minor changes for locking. I have just discovered a 
>>problem with ipnat though trying to setup a ftp proxy rule.
>>
>>map eth1 192.168.4.0/24  -> 2.2.2.1/32 proxy port ftp ftp/tcp
>>
>>when I try to insert this I get:
>>[root@Z1234 proc]# ipnat -CF -f /etc/ipnat.cfg
>>0 entries flushed from NAT table
>>0 entries flushed from NAT list
>>1:ioctl(add/insert nat rule): No such file or directory
>>
>>other map rules seem to be ok.
>>
>>Could someone point me where I should start looking for this problem. I haven't been able to
>>figure out how ip_ftp_pxy.c get compiled and where it ends up. I can't find a .o file in the
>>Linux/Linux-2.6.18-92.1.10.el5-i686 directory.
>>
>>Thanks,
>>Steve
>>
> 
> 
> 
Hi David,

I put 
#error "in ip_ftp_proxy"
in the ip_ftp_pxy.c file to see if it was being included and as you can see below it appears
that it is being included into ip_proxy.c - so there must be something else going wrong.

make[1]: Entering directory `/root/ip_fil4.1.31/Linux'
cc -I. -ILinux-2.6.18-92.1.10.el5-i686 -g -I.. -D_BSD_SOURCE     -DIPFILTER_LOOKUP -DIPFILTER_SCAN -DIPFILTER_LOG -DLINUX=20618 -c ../ip_proxy.c -o Linux-2.6.18-92.1.10.el5-i686/ip_proxy_u.o
In file included from ../ip_proxy.c:91:
../netinet/ip_ftp_pxy.c:11:2: error: #error "in ip_ftp_proxy"
make[1]: *** [Linux-2.6.18-92.1.10.el5-i686/ip_proxy_u.o] Error 1

Thanks,
Steve