Hello,

I'm new to patching and recompiling Linux.  I have enlisted the help of
a more experienced programmer and Linux user but we are still having
problems.

I am trying to upgrade the 2.4.8 (-26mdk) kernel that comes with
Mandrake 8.1.to version 2.4.17 and apply the
bridge-nf-0.0.6-against-2.4.17.diff and the 4 patches and installing the
bridge and IPtables to build a transparent firewall.  I previously had
an earlier version of the transparent bridge-nf working, but have
destroyed it in the process of trying to upgrade.  I am interested in
only firewalling using mainly the simpler rules (but including the use
of the stateful rules, of course, but not NAT etc.)

I have started a number of times with clean directories,  first tar
(-[j|z]xvf)'ing  the 2.4.17 kernel, bridge-utils-0.9.5 and
iptables-1.2.5 sources into separate trees and then following the
included documentation through the build process.  I always end up with
some combination of  (1.) No "Bridge firewalling registered" message
upon booting the new kernel, (2.) Iptables complaining that it can't
find the location of a list of its modules and failing to run and/or
(3.) compiling bzImage failing due to errors when I recompile the kernel
after installing Iptables including running "make most-of-pom".

I have a few questions/requests.

I've usually done the patching in this order. Patching in this order
succeeds with only "1 of 4 hunks" failing on the "bridge-nf-0.0.6...."
patch after I answer N, N to reverting one hunk.  Is this a correct
order?

01_config_inet_dependancy.diff
02_enslave_bridge_dev_to_bridge_dev.diff
2.4_fix_duplicate_local_mac_addresses.diff
03_fix_duplicate_local_mac_addresses.diff
bridge-nf-0.0.6-against-2.4.17.diff

I am also confused about installing IPtables.  Should one do the "make
KERNEL_DIR=/x/y/z...." step, then do "make install
KERNEL_DIR=/x/y/z...." step, and then do "make most-of-pom
KERNEL_DIR=/......" ?  Is it necessary to exactly match features
selected in the kernel "make xconfig" step against what is selected in
"make most-of-pom" step of installing IPtables?

I am also confused about some of the networking options in kernel
.config.  Could an expert email me a .config file that is configured to
achieve the standard transparent bridge-netfilter operation so that that
I could compare its network section to mine?

I want to again thank Lennert Buytenhek for all his hard work and for
the most professional way he keeps the bridge list running.
(I want to note that the core bridge and bridge utilities that Lennert
maintains are easy to install,  well documented  and always work
correctly--only the IPtables portion is giving me fits.  The Netfilter
Web site doesn't seem to address use of IPtables with the bridge except
in a passing mention.)

Also, my problems may be caused by starting with the Mandrake 8.1
distro.  Has any one else succeeded starting with Mandrake 8.1?

With a few more hints, I am hoping to get a firewall to put in service
again.

Sincerely,

John Aasen






_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to