iptables-1.3.5 patch-o-matic-ng policy patch does not build

I am trying to patch iptables-1.3.5 using patch-o-matic-ng to include the policy patch. I am building against the 2.6.12 kernel from an source rpm. I get these errors when I build:

cc -O2 -g -pipe -m32 -march=i386 -mtune=pentium4 -I/usr/src/redhat/BUILD/iptables-1.3.5/include -fPIC -Wall -Wunused -I/usr/include -Iinclude/ -DIPTABLES_VERSION=\"1.3.5\" -fPIC -o extensions/libipt_policy_sh.o -c extensions/libipt_policy.c extensions/libipt_policy.c: In function `parse_direction':
extensions/libipt_policy.c:104: error: `POLICY_MATCH_IN' undeclared (first use in this function)
extensions/libipt_policy.c:104: error: (Each undeclared identifier is reported only once
extensions/libipt_policy.c:104: error: for each function it appears in.)
extensions/libipt_policy.c:106: error: `POLICY_MATCH_OUT' undeclared (first use in this function)
extensions/libipt_policy.c: In function `parse_policy':
extensions/libipt_policy.c:113: error: `POLICY_MATCH_NONE' undeclared (first use in this function)
extensions/libipt_policy.c: In function `parse_mode':
extensions/libipt_policy.c:122: error: `POLICY_MODE_TRANSPORT' undeclared (first use in this function)
extensions/libipt_policy.c:124: error: `POLICY_MODE_TUNNEL' undeclared (first use in this function)
extensions/libipt_policy.c: In function `parse':
extensions/libipt_policy.c:143: error: `POLICY_MATCH_IN' undeclared (first use in this function)
extensions/libipt_policy.c:143: error: `POLICY_MATCH_OUT' undeclared (first use in this function)
extensions/libipt_policy.c:160: error: `POLICY_MATCH_STRICT' undeclared (first use in this function)
extensions/libipt_policy.c:200: error: incompatible types in assignment
extensions/libipt_policy.c:201: error: incompatible types in assignment
extensions/libipt_policy.c:215: error: incompatible types in assignment
extensions/libipt_policy.c:216: error: incompatible types in assignment
extensions/libipt_policy.c:246: error: `POLICY_MAX_ELEM' undeclared (first use in this function)
extensions/libipt_policy.c: In function `final_check':
extensions/libipt_policy.c:268: error: `POLICY_MATCH_IN' undeclared (first use in this function)
extensions/libipt_policy.c:268: error: `POLICY_MATCH_OUT' undeclared (first use in this function)
extensions/libipt_policy.c:272: error: `POLICY_MATCH_NONE' undeclared (first use in this function)
extensions/libipt_policy.c:273: error: `POLICY_MATCH_STRICT' undeclared (first use in this function)
extensions/libipt_policy.c:290: error: `POLICY_MODE_TUNNEL' undeclared (first use in this function)
extensions/libipt_policy.c:291: error: `POLICY_MODE_TRANSPORT' undeclared (first use in this function)
extensions/libipt_policy.c: In function `print_mode':
extensions/libipt_policy.c:303: error: `POLICY_MODE_TRANSPORT' undeclared (first use in this function)
extensions/libipt_policy.c:306: error: `POLICY_MODE_TUNNEL' undeclared (first use in this function)
extensions/libipt_policy.c: In function `print_flags':
extensions/libipt_policy.c:369: error: `POLICY_MATCH_IN' undeclared (first use in this function)
extensions/libipt_policy.c:374: error: `POLICY_MATCH_NONE' undeclared (first use in this function)
extensions/libipt_policy.c:379: error: `POLICY_MATCH_STRICT' undeclared (first use in this function)
make: *** [extensions/libipt_policy_sh.o] Error 1
error: Bad exit status from /var/tmp/rpm-tmp.86614 (%build)

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

I suggest you use a vanilla kernel from http://www.kernel.org/ to avoid any customization in your kernel.

Jorge.

Jorge Isaac Davila Lopez
Nicaragua Open Source
+505 808 2478
[email protected]