Ядро 2.6.17, iptables-1.3.5 После сборки и инсталляции пакета ipset-4.5 и проверки на тесте получаю-
iptables v1.3.5: Couldn't load match `set':/lib/iptables/libipt_set.so: cannot open shared object file: No such file or directory
Т.е. iptables не имеет файла /lib/iptables/libipt_set.so. Скопировал в работающее ядро из пакета ipset файлы ../kernel/include/linux/netfilter_ipv4/{ip,ipt}_set.h Сборка iptables прошла с ошибкой.
[root@maestro iptables-1.3.5]# make KERNEL_DIR=/usr/src/kernels/linux
In file included from /usr/src/kernels/linux/include/linux/netfilter_ipv4.h:8,
from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_string.c:29:
/usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel header in userspace; use the glibc headers instead!
In file included from /usr/src/kernels/linux/include/linux/netfilter_ipv4.h:8,
from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_SET.c:19:
/usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel header in userspace; use the glibc headers instead!
In file included from /usr/src/kernels/linux/include/linux/netfilter_ipv4.h:8,
from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_set.c:20:
/usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel header in userspace; use the glibc headers instead!
In file included from /usr/src/kernels/linux/include/linux/netfilter_ipv4.h:8,
from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_recent.c:8:
/usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel header in userspace; use the glibc headers instead!
In file included from /usr/src/kernels/linux/include/linux/netfilter_ipv4.h:8,
from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_dccp.c:15:
/usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel header in userspace; use the glibc headers instead!
Extensions found: IPv4:dccp IPv4:recent IPv4:set IPv4:SET IPv4:string IPv6:REJECT
cc -O2 -Wall -Wunused -I/usr/src/kernels/linux/include -Iinclude/ -DIPTABLES_VERSION=\"1.3.5\" -fPIC -o extensions/libipt_ah_sh.o -c
extensions/libipt_ah.c
In file included from /usr/src/kernels/linux/include/linux/netfilter_ipv4.h:8,
from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_ah.c:8:
/usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel header in userspace; use the glibc headers instead!
make: *** [extensions/libipt_ah_sh.o] Ошибка 1Как исправить ситуацию и создать файлы {ip,ipt}_set.h?
>[оверквотинг удален]
> from /usr/src/kernels/linux/include/linux/netfilter_ipv4/ip_tables.h:26,
> from include/libiptc/libiptc.h:6,
> from include/iptables.h:5,
>
> from extensions/libipt_ah.c:8:
> /usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel
> header in userspace; use the glibc headers instead!
> make: *** [extensions/libipt_ah_sh.o] Ошибка 1
>
apt-get install libipset
||
yum install libipset
>[оверквотинг удален]
>>
>> from extensions/libipt_ah.c:8:
>> /usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel
>> header in userspace; use the glibc headers instead!
>> make: *** [extensions/libipt_ah_sh.o] Ошибка 1
>>
>> Как исправить ситуацию и создать файлы {ip,ipt}_set.h?
> apt-get install libipset
> ||
> yum install libipsetСистема ASPLinux 11.2
Приходится собирать из исходников ipset и iptables. Но не получается.
>[оверквотинг удален]
>>> /usr/src/kernels/linux/include/linux/config.h:8:2: error: #error including kernel
>>> header in userspace; use the glibc headers instead!
>>> make: *** [extensions/libipt_ah_sh.o] Ошибка 1
>>>
>>> Как исправить ситуацию и создать файлы {ip,ipt}_set.h?
>> apt-get install libipset
>> ||
>> yum install libipset
> Система ASPLinux 11.2
> Приходится собирать из исходников ipset и iptables. Но не получается.Пользуйтесь пакетным менеджером
http://asplinux.net/node/42
> Пользуйтесь пакетным менеджером
> http://asplinux.net/node/42В репозитариях ASPLinux отсутствует ipset*.rpm