Where is CONNMARK extension kernel 2.4.32?

Hi all.

I have troubles with CONNMARK extensions into kernel 2.4.32.

The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng and I cant see CONNMARK extension into the pom-ng options and isn't in kernel config.

Perhaps could be that any patch I applied before (IMQ, Layer7filter, etc...) had broken it. I had compiled kernel, iptables (1.3.4) and many pom-ng patches. And when I test some scripts that uses CONNMARK without success (chain/tarjet error).
I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is the reason why I can view "iptables -j CONNMARK --help" help text, but I can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and isn't compiled into the kernel (cat /usr/src/linux/.config | grep "CONNMARK") doesn't show me anythink.

Can anybody help me please?

Thanks

Quoted 6 lines

Hi all.

I have troubles with CONNMARK extensions into kernel 2.4.32.

The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng and I cant see CONNMARK extension into the pom-ng options and isn't in kernel config.

Quoted 7 lines

Perhaps could be that any patch I applied before (IMQ, Layer7filter, etc...) had broken it. I had compiled kernel, iptables (1.3.4) and many pom-ng patches. And when I test some scripts that uses CONNMARK without success (chain/tarjet error).
I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is the reason why I can view "iptables -j CONNMARK --help" help text, but I can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and isn't compiled into the kernel (cat /usr/src/linux/.config | grep "CONNMARK") doesn't show me anythink.

Can anybody help me please?

Thanks

Samuel Díaz García napisał(a):

Quoted 6 lines

Quoted 6 lines

Hi all.

I have troubles with CONNMARK extensions into kernel 2.4.32.

The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng and I cant see CONNMARK extension into the pom-ng options and isn't in kernel config.

Quoted 7 lines

Quoted 7 lines

Perhaps could be that any patch I applied before (IMQ, Layer7filter, etc...) had broken it. I had compiled kernel, iptables (1.3.4) and many pom-ng patches. And when I test some scripts that uses CONNMARK without success (chain/tarjet error).
I can view /usr/local/usr/libipt_CONNMARK.so and I suppose that is the reason why I can view "iptables -j CONNMARK --help" help text, but I can't see any "/lib/modules/2.4.32/....." *CONNMARK* module and isn't compiled into the kernel (cat /usr/src/linux/.config | grep "CONNMARK") doesn't show me anythink.

Can anybody help me please?

Thanks

which pom-ng snapshot are you using?
The last pom-ng snapshot with CONNMARK/TTL/string is from 20050918.
Then these patches were removed, because they are now in 2.6 kernel serie. But not in 2.4 :/

The last pom-ng tested by me where the 20051231 and I'm sure the CONNMARK isn't into it.

Could any netfilter guy re-add these patches into pom-ng for the 2.4 kernels? Or, better, talk with kernel guys to add them into 2.4 mainline?

What do you think about this propose?

Samuel Díaz García napisał(a):

Quoted 1 line

The last pom-ng tested by me where the 20051231 and I'm sure the CONNMARK isn't into it.

Because in snapshots _newer_ then 20050918 there's no CONNMARK, string, TTL.

Quoted 3 lines

Could any netfilter guy re-add these patches into pom-ng for the 2.4 kernels? Or, better, talk with kernel guys to add them into 2.4 mainline?

What do you think about this propose?

I agree :)

I have troubles with CONNMARK extensions into kernel 2.4.32.

The problem I have is that I tried to patch a 2.4.32 kernel with pom-ng and I cant see CONNMARK extension into the pom-ng options and isn't in kernel config.