Install Debian
/etc/init.d/sshd start
apt-get install joe screen bzip2 ncurses-dev kernel-package
wget http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.15.2.tar.bz2
cd /usr/src/
tar jxvf /usr/local/src/linux-2.6.15.2.tar.bz2
wget http://belnet.dl.sourceforge.net/sourceforge/l7-filter/netfilter-layer7-v2.1.tar.gz
tar zxvf netfilter-layer7-v2.1.tar.gz
cd /usr/src/linux-2.6.15.2
patch -p1 < /usr/local/src/netfilter-layer7-v2.1/kernel-2.6.13-2.6.15-layer7-2.1.patch
cp /boot/config-2.6.8-2-686 /usr/src/linux-2.6.15.2/.config
make menuconfig
New Kernel Options:
Networking--> Networking Options --> Network packet filtering (replaces ipchains) ---> IP: Netfilter Configuration --->
Connection tracking flow accounting
Connection mark tracking support
Layer 7 match support (EXPERIMENTAL) (as Module)
CONNMARK target support
Connection mark match support
make-kpkg clean
make-kpkg -initrd kernel_image
make-kpkg kernel_headers
dpkg -i kernel-headers-2.6.15.2_10.00.Custom_i386.deb
dpkg -i kernel-image-2.6.15.2_10.00.Custom_i386.deb
reboot
apt-get remove iptables
wget http://www.netfilter.org/projects/iptables/files/iptables-1.3.5.tar.bz2
tar jxvf iptables-1.35.tar.bz2
wget http://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot/patch-o-matic-ng-20060131.tar.bz2
tar jxvf patch-o-matic-ng-20060131.tar.bz2
KERNEL_DIR=/usr/src/linux/ IPTABLES_DIR=/usr/local/src/iptables-1.3.5/ ./runme base
cd /usr/local/src/iptables-1.3.5
patch -p1 < /usr/local/src/netfilter-layer7-v2.1/iptables-layer7-2.1.patch
chmod +x extensions/.layer7-test
Makefile:
KERNEL_DIR=/usr/src/linux
LIBDIR:=/lib
BINDIR:=/sbin
MANDIR:=/usr/share/man
make
make install
Recompile and install the kernel:
make menuconfig
make-kpkg clean
make-kpkg -initrd kernel_image kernel_headers
dpkg -i kernel-headers-2.6.15.2_10.00.Custom_i386.deb
dpkg -i kernel-image-2.6.15.2_10.00.Custom_i386.deb
reboot
wget http://www.ipp2p.org/downloads/ipp2p-0.8.0.tar.gz
I edit the Makefile
KERNEL_SRC = /usr/src/linux-2.6.15.2
IPTABLES_SRC = /usr/local/src/iptables-1.3.5
IPTABLES_BIN = /sbin/iptables
make
cp /usr/local/src/ipp2p-0.8.0/libipt_ipp2p.so /lib/iptables/
/sbin/insmod ipt_ipp2p.ko
But after that I get this error:
supergestor:/usr/local/src/ipp2p-0.8.0# insmod ipt_ipp2p.ko
insmod: error inserting 'ipt_ipp2p.ko': -1 Unknown symbol in module
And after that I have realised that I don't have any iptables module loaded:
supergestor:/usr/local/src/ipp2p-0.8.0# lsmod | grep ip
ipv6 277664 10
supergestor: