#75 l7 fails to compile on kernels 2.6.35 and up

[Anonymous]

As mentioned, Linux kernel starting from kernel version 2.6.35 and later fails to compile with L7 patch applied.

We really need to get it fixed...

[sncvision]

CC [M] net/netfilter/xt_state.o
CC [M] net/netfilter/xt_layer7.o
net/netfilter/xt_layer7.c:417: warning: ?€?struct xt_match_param?€? declared inside parameter list
net/netfilter/xt_layer7.c:417: warning: its scope is only this definition or declaration, which is probably not what you want
net/netfilter/xt_layer7.c: In function ?€?match?€?:
net/netfilter/xt_layer7.c:434: error: dereferencing pointer to incomplete type
net/netfilter/xt_layer7.c: At top level:
net/netfilter/xt_layer7.c:616: warning: initialization from incompatible pointer type
net/netfilter/xt_layer7.c:617: warning: initialization from incompatible pointer type
make[3]: *** [net/netfilter/xt_layer7.o] Error 1
make[2]: *** [net/netfilter] Error 2
make[1]: *** [net] Error 2
make[1]: Leaving directory `/usr/src/linux-source-2.6.35'
make: *** [debian/stamp/build/kernel] Error 2

[Anonymous]

line ~416
find
-------
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 28)
match(const struct sk_buff *skbin, const struct xt_match_param *par)
-------
and replace with
--------
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)
match(const struct sk_buff *skbin, const struct xt_action_param *par)
#elif LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 28)
match(const struct sk_buff *skbin, const struct xt_match_param *par)
--------

[sncvision]

kernel 2.6.37 and patch layer7

# make menuconfig
Networking options --->
...
...
[*] Network packet filtering framework (Netfilter) --->
Core Netfilter Configuration --->
Netfilter connection tracking support
...
...

not find "layer7" match support

thanks

[kha0tic]

I posted the following patch for kernel 2.6.36 and above to the developers mailing list in December. Unfortunately, it does not seem that this is a very actively maintained package. Follow the first link to retrieve the patch for 2.6.35, and then apply the patch in my post to this patch. After this, l7-filters will compile and run correctly on 2.6.36

https://sourceforge.net/mailarchive/message.php?msg_id=26704678