Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
iptables
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
InAt!QuE
Apprentice
Apprentice


Joined: 02 Jan 2004
Posts: 257
Location: The Netherlands

PostPosted: Wed Feb 04, 2004 11:39 am    Post subject: iptables Reply with quote

Hi,

I did emerge -k iptables and i got an error during compiling:
Code:
make: *** [extensions/libipt_ROUTE_sh.o] Error 1

!!! ERROR: net-firewall/iptables-1.2.9 failed.
!!! Function src_compile, Line 53, Exitcode 2
!!! (no error message)


how come and how to solve?? Anybody knows?
_________________
...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly).
Back to top
View user's profile Send private message
nevynxxx
Veteran
Veteran


Joined: 12 Nov 2003
Posts: 1123
Location: Manchester - UK

PostPosted: Wed Feb 04, 2004 1:57 pm    Post subject: Reply with quote

did you try without the -k? maybe it can't find the binary packages it needs to, what does
Code:
emerge -pv iptables
give you?
_________________
My Public Key

Wanted: Instructor in the art of Bowyery
Back to top
View user's profile Send private message
InAt!QuE
Apprentice
Apprentice


Joined: 02 Jan 2004
Posts: 257
Location: The Netherlands

PostPosted: Wed Feb 04, 2004 2:17 pm    Post subject: Reply with quote

Code:
emerge -pv iptables

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild  N    ] net-firewall/iptables-1.2.9  -ipv6


did emerge iptables, without the "-k" and got also the same error

BTW: What's the exact difference between emerge ebuild / emerge -k ebuild ??
_________________
...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly).
Back to top
View user's profile Send private message
dreamer
Apprentice
Apprentice


Joined: 16 Aug 2003
Posts: 236

PostPosted: Wed Feb 04, 2004 2:43 pm    Post subject: Reply with quote

InAt!QuE wrote:

<snip>
BTW: What's the exact difference between emerge ebuild / emerge -k ebuild ??

Code:
 --usepkg (-k)
              Tells  emerge  to use binary packages (from $PKGDIR) if they are
              available, thus possibly avoiding some time-consuming  compiles.
              This   option   is  useful  for  CD  installs;  you  can  export
              PKGDIR=/mnt/cdrom/packages and then  use  this  option  to  have
              emerge  "pull"  binary  packages from the CD in order to satisfy
              dependencies.


iptables 1.2.8 worked fine for you?
Back to top
View user's profile Send private message
InAt!QuE
Apprentice
Apprentice


Joined: 02 Jan 2004
Posts: 257
Location: The Netherlands

PostPosted: Wed Feb 04, 2004 2:57 pm    Post subject: Reply with quote

dreamer wrote:

iptables 1.2.8 worked fine for you?


I didn't have 1.2.8 .. first time iptables install :wink:
_________________
...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly).
Back to top
View user's profile Send private message
kaffeen
Tux's lil' helper
Tux's lil' helper


Joined: 27 Jan 2004
Posts: 139
Location: The Frozen North

PostPosted: Wed Feb 04, 2004 4:48 pm    Post subject: Same error with Iptables v1.2.9 Reply with quote

I am receiving the same error when trying to 'emerge iptables'. I have attempted to do so with both the gentoo-sources-2.4.20-r6 and gentoo-dev-sources-2.6.1 kernels. My only success was in copying the tbz2 packaged from the LiveCD and doing a binary emerge 'emerge -k iptables-1.2.8-r1.tbz2'.

I was able to emerge iptables-1.2.9 on my other pc a week or so ago without any problems but shortly after that, have not been able to successfully build it on my other pc.
Back to top
View user's profile Send private message
InAt!QuE
Apprentice
Apprentice


Joined: 02 Jan 2004
Posts: 257
Location: The Netherlands

PostPosted: Wed Feb 04, 2004 5:20 pm    Post subject: Reply with quote

could this be a kernel issue ??
_________________
...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly).
Back to top
View user's profile Send private message
go2sleep
n00b
n00b


Joined: 06 Sep 2003
Posts: 31
Location: Belgium

PostPosted: Wed Feb 04, 2004 5:38 pm    Post subject: Reply with quote

Iptables care about kernel config when iptable is compiling.

So if you are not sure about your kernel configuration you can check by reading this page : http://www.shorewall.net/kernel.htm. On it there are nice screenshot of kernel configuration.

I used that way for setting up my kernel configuration.
And it work fine.

Just one thing, if you are using lilo as boot loader, after compyling your kernel and espacialy after copying you bzImage file to the /boot directory, don't forget to run the /sbin/lilo command for refreshing the lilo loader. If you don't do that your new kernel configuration will not be loaded when you will reboot your computer.
Back to top
View user's profile Send private message
kaffeen
Tux's lil' helper
Tux's lil' helper


Joined: 27 Jan 2004
Posts: 139
Location: The Frozen North

PostPosted: Wed Feb 04, 2004 8:03 pm    Post subject: Conntrack.. Reply with quote

I am getting the same error with two different kernels (see above post).

I am using grub rather than lilo and am not aware of any changes (beyond editing the grub.conf file) that I would have to make once I've built a new kernel and copied the bzImage to /boot.

Having been a little more than frustrated by this and iptables v1.2.8 not working at all, I didn't notice this before. When iptables 1.2.9 is compiling, it is always failing when configuring Conntrack. I don't recall at this momen the exact line before I get the same error message posted in the original post of this thread. When I get home, I will try building a kernel without conntrack support and see if it can then compile iptables-1.2.9.
Back to top
View user's profile Send private message
TheCoop
Veteran
Veteran


Joined: 15 Jun 2002
Posts: 1814
Location: Where you least expect it

PostPosted: Wed Feb 04, 2004 8:14 pm    Post subject: Reply with quote

whats in the 6 or so lines above the error msg you posted? ideally post everything below the last line starting with 'gcc'
_________________
95% of all computer errors occur between chair and keyboard (TM)

"One World, One web, One program" - Microsoft Promo ad.
"Ein Volk, Ein Reich, Ein Führer" - Adolf Hitler

Change the world - move a rock
Back to top
View user's profile Send private message
InAt!QuE
Apprentice
Apprentice


Joined: 02 Jan 2004
Posts: 257
Location: The Netherlands

PostPosted: Thu Feb 05, 2004 11:14 am    Post subject: Reply with quote

TheCoop wrote:
whats in the 6 or so lines above the error msg you posted? ideally post everything below the last line starting with 'gcc'


This is more:
Code:
gcc -O3 -march=pentium3 -fprefetch-loop-arrays -funroll-loops -pipe -Iinclude -W all -Wunused -I/usr/src/linux/include  -DIPTABLES_VERSION=\"1.2.9\"  -fPIC -o extensions/libipt_NETLINK_sh.o -c extensions/libipt_NETLINK.c
ld -shared -o extensions/libipt_NETLINK.so extensions/libipt_NETLINK_sh.o
gcc -O3 -march=pentium3 -fprefetch-loop-arrays -funroll-loops -pipe -Iinclude -W all -Wunused -I/usr/src/linux/include  - DIPTABLES_VERSION=\"1.2.9\"  -fPIC -o extensions/libipt_ROUTE_sh.o -c extensions/libipt_ROUTE.c
extensions/libipt_ROUTE.c: In function `init':
extensions/libipt_ROUTE.c:51: structure has no member named `flags'
extensions/libipt_ROUTE.c: In function `parse':
extensions/libipt_ROUTE.c:138: structure has no member named `flags'
extensions/libipt_ROUTE.c:138: `IPT_ROUTE_CONTINUE' undeclared (first use in this function)
extensions/libipt_ROUTE.c:138: (Each undeclared identifier is reported only once
extensions/libipt_ROUTE.c:138: for each function it appears in.)
extensions/libipt_ROUTE.c: In function `print':
extensions/libipt_ROUTE.c:186: structure has no member named `flags'
extensions/libipt_ROUTE.c:186: `IPT_ROUTE_CONTINUE' undeclared (first use in this function)
extensions/libipt_ROUTE.c: In function `save':
extensions/libipt_ROUTE.c:209: structure has no member named `flags'
extensions/libipt_ROUTE.c:209: `IPT_ROUTE_CONTINUE' undeclared (first use in this function)
make: *** [extensions/libipt_ROUTE_sh.o] Error 1

!!! ERROR: net-firewall/iptables-1.2.9 failed.
!!! Function src_compile, Line 53, Exitcode 2
!!! (no error message)


Running 2.6.1 kernel ... gentoo-dev-sources
_________________
...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly).
Back to top
View user's profile Send private message
InAt!QuE
Apprentice
Apprentice


Joined: 02 Jan 2004
Posts: 257
Location: The Netherlands

PostPosted: Thu Feb 05, 2004 11:49 am    Post subject: Reply with quote

go2sleep wrote:
Iptables care about kernel config when iptable is compiling.

So if you are not sure about your kernel configuration you can check by reading this page : http://www.shorewall.net/kernel.htm. On it there are nice screenshot of kernel configuration.

I used that way for setting up my kernel configuration.
And it work fine.

Just one thing, if you are using lilo as boot loader, after compyling your kernel and espacialy after copying you bzImage file to the /boot directory, don't forget to run the /sbin/lilo command for refreshing the lilo loader. If you don't do that your new kernel configuration will not be loaded when you will reboot your computer.


Ok I'll guess the problem is in my kernel... because I don't have all the settings like the screenie you showed... I'll recompile it and try it again.
_________________
...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly).
Back to top
View user's profile Send private message
friction
Tux's lil' helper
Tux's lil' helper


Joined: 16 Sep 2002
Posts: 109

PostPosted: Thu Feb 05, 2004 12:06 pm    Post subject: Reply with quote

Having the same problem while trying to upgrade from 1.2.8-r1 on two different machines, but both using conntrack.
Back to top
View user's profile Send private message
kaffeen
Tux's lil' helper
Tux's lil' helper


Joined: 27 Jan 2004
Posts: 139
Location: The Frozen North

PostPosted: Thu Feb 05, 2004 2:34 pm    Post subject: Possible solution Reply with quote

I was getting the same error when trying to emerge iptables 1.2.9. However, my /usr/src/linux symlink was pointing to my original kernel source, not my current. I delete the symlink and created a new one pointing to the new kernel source

Code:
ln -sf /usr/src/linux-2.6.1-gentoo /usr/src/linux


and it was able to build iptables 1.2.9 successfully after that.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum