TARPIT on linux-2.6

TARPIT on linux-2.6

[dada1]

Hi all

I tried to compile TARPIT module (from patch-o-matic-20030912.tar.bz2) on a
linux-2.6.0-test5 kernel :

make modules
  CC [M]  net/ipv4/netfilter/ipt_TARPIT.o
net/ipv4/netfilter/ipt_TARPIT.c: In function `tarpit_tcp':
net/ipv4/netfilter/ipt_TARPIT.c:182: warning: implicit declaration of
function `ip_route_output'
net/ipv4/netfilter/ipt_TARPIT.c:192: structure has no member named `pmtu'
net/ipv4/netfilter/ipt_TARPIT.c: At top level:
net/ipv4/netfilter/ipt_TARPIT.c:268: warning: initialization from
incompatible pointer type
net/ipv4/netfilter/ipt_TARPIT.c:268: warning: initialization from
incompatible pointer type

It seems linux-2.6 made some changes on ip_route_output() stuff, that I dont
understand at all to try my own patches... :)

The pmtu part is easy : (line 192)

-   if (nskb->len > nskb->dst->pmtu)
+   if (nskb->len > dst_pmtu(nskb->dst))

The ipt_target part too (line 270)

- static struct ipt_target ipt_tarpit_reg
- = { { NULL, NULL }, "TARPIT", tarpit, check, NULL, THIS_MODULE };
+ static struct ipt_target ipt_tarpit_reg = {
+  .name       = "TARPIT",
+   .target     = tarpit,
+  .checkentry = check,
+    .me     = THIS_MODULE,
+ }

Anybody willing to help about ip_route_output() ?

Thanks
Eric Dumazet

Re: TARPIT on linux-2.6

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1071 bytes --]

On Wed, Oct 15, 2003 at 09:30:42AM +0200, dada1 wrote:
> It seems linux-2.6 made some changes on ip_route_output() stuff, that I dont
> understand at all to try my own patches... :)

yes, patch-o-matic is currently only for 2.4.x kernels, sorry.

I'm in the process of re-implementing the 'runme' script in perl, in
order to allow for 2.6.x compatible patches.  After this system has been
put in place, all new development will _really_ be based on 2.6.x
only... and patch-o-matic for 2.4.x will mostly stay like it is today.

security patches and bugfixes will move out of patch-o-matic and be
distributed as standard patches against every kernel release.

> Thanks
> Eric Dumazet

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]