* iptables >= 1.4.5
- * kernel-devel >= 2.6.38
+ * kernel-devel >= 2.6.39
with prepared build/output directory
- CONFIG_NF_CONNTRACK or CONFIG_IP_NF_CONNTRACK
- CONFIG_NF_CONNTRACK_MARK or CONFIG_IP_NF_CONNTRACK_MARK
echo "WARNING: That kernel version is not officially supported.";
elif test "$kmajor" -eq 3; then
:;
- elif test "$kmajor" -eq 2 -a "$kminor" -eq 6 -a "$kmicro" -ge 38; then
+ elif test "$kmajor" -eq 2 -a "$kminor" -eq 6 -a "$kmicro" -ge 39; then
:;
else
echo "WARNING: That kernel version is not officially supported.";
HEAD
====
Changes:
-- remove support for Linux 2.6.17–2.6.37
+- remove support for Linux 2.6.17–2.6.38
- remove xt_TEE (this is available upstream since 2.6.35)
- remove xt_CHECKSUM (this is available upstream since 2.6.36)
#define DEBUGP Use__pr_debug__instead
-#if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 38)
-# warning Kernels below 2.6.38 not supported.
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 39)
+# warning Kernels below 2.6.39 not supported.
#endif
#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
}
skb_dst_set(newskb, dst);
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 38)
newip->hop_limit = ip6_dst_hoplimit(skb_dst(newskb));
-#else
- newip->hop_limit = dst_metric(skb_dst(newskb), RTAX_HOPLIMIT);
-#endif
newskb->ip_summed = CHECKSUM_NONE;
/* "Never happens" (?) */
if (ip_route_me_harder(&newskb, RTN_UNSPEC) != 0)
goto free_nskb;
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 38)
newip->ttl = ip4_dst_hoplimit(skb_dst(newskb));
-#else
- newip->ttl = dst_metric(skb_dst(newskb), RTAX_HOPLIMIT);
-#endif
newskb->ip_summed = CHECKSUM_NONE;
/* "Never happens" (?) */
if (mode == XTTARPIT_HONEYPOT)
niph->ttl = 128;
else
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 38)
niph->ttl = ip4_dst_hoplimit(skb_dst(nskb));
-#else
- niph->ttl = dst_metric(skb_dst(nskb), RTAX_HOPLIMIT);
-#endif
/* Adjust IP checksum */
niph->check = 0;
if (mode == XTTARPIT_HONEYPOT) {
ip6h->hop_limit = 128;
} else {
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 38)
ip6h->hop_limit = ip6_dst_hoplimit(skb_dst(nskb));
-#else
- ip6h->hop_limit = dst_metric(skb_dst(nskb), RTAX_HOPLIMIT);
-#endif
}
tcph = (struct tcphdr *)(skb_network_header(nskb) +