Fix ipchains/ipfw modules

ipchains didn't load anymore because it had a undefined symbol, which was satisfied by ipconntrack. This caused ipconntrack to be loaded first by modprobe, but the second ipconntrack init in ipchains would fail, causing the ipchains load to fail.

ipfw had the same problem.

Declare the missing variable.

Signed-off-by Andi Kleen <[email protected]>

diff -u linux/net/ipv4/netfilter/ip_fw_compat.c-IPC linux/net/ipv4/netfilter/ip_fw_compat.c

net/ipv4/netfilter/ip_fw_compat.c renamed from net/ipv4/netfilter/ip_fw_compat.c-IPC +2 -0

@@ -28,6 +28,8 @@
 
 static struct firewall_ops *fwops;
 
+unsigned int ip_ct_log_invalid;
+
 #ifdef CONFIG_IP_VS
 /* From ip_vs_core.c */
 extern unsigned int

Patrick McHardy fixed this in a different way in the "Re: [PATCH] Warn people that ipchains and ipfwadm are going away." lkml thread :-)

His explanation:

"Fixed by this patch. The conntrack protocols need ip_ct_log_invalid which is defined in ip_conntrack_standalone, so ip_conntrack is loaded automatically before ipchains. This patch moves it over to ip_conntrack_core."