NetFilter Patches
NetFilter Patches
The NetFilter version used in this book was the CVS version. The latest one used with all PakSecured patches applied is available as a source tarball on the Web site and CD. Also available is the PakSecured NetFilter patches to apply to a NetFilter CVS source code tree. Both the patches and the fully prepatched tarball are maintained . You can obtain the latest version through the book Web site and also from the PakSecured Web site.
Note
The latest version of NetFilter 1.2 released January 8, 2001, contains the PakSecured patches. You do not need to apply the following patch if you are using NetFilter 1.2 or later.
If you downloaded the patch you can apply it to NetFilter CVS using the following steps:
-
Change into the root source directory for NetFilter ( /usr/src/netfilter ).
-
Untar the patch file ( FTOS.cvs.tar.gz ) in that directory. If you do not have the CVS source there is a version of the patch that will apply to the released iptables utility package. Note that you must compile NetFilter from source for these patches to work.
-
If you have used one of the 2.4 patched kernels from the CD, you can simply compile and install NetFilter at this point. If not, you need to compile and run one of the patched kernels in order for the NetFilter compile to work.
The patches install the FTOS extension as used in Chapter 6, "Complex Network Examples," and also the IPv6 marking facilities. The IPv6 assumes that the IPv6 NetFilter parts of the kernel have been patched. The FTOS extension assumes that you have either applied the PakSecured patch to the kernel or you have run patch-o-matic from the NetFilter distribution and selected FTOS.
The binaries for the NetFilter that correspond with the PakSecured kernel source is available as well through the Web site and on the CD.
| Top |
