l7-filter-2.[8-9] seem to emerge fine vs gentoo-sources-2.6.20-r6, however, nothing can be found in the netfilter section. Therefore, l7-filters do not work. Reproducible: Always Steps to Reproduce: # emerge l7-filter Calculating dependencies... done! >>> Emerging (1 of 1) net-misc/l7-filter-2.9 to / * netfilter-layer7-v2.9.tar.gz RMD160 ;-) ... [ ok ] * netfilter-layer7-v2.9.tar.gz SHA1 ;-) ... [ ok ] * netfilter-layer7-v2.9.tar.gz SHA256 ;-) ... [ ok ] * netfilter-layer7-v2.9.tar.gz size ;-) ... [ ok ] * additional_patch_for_2.6.13.diff RMD160 ;-) ... [ ok ] * additional_patch_for_2.6.13.diff SHA1 ;-) ... [ ok ] * additional_patch_for_2.6.13.diff SHA256 ;-) ... [ ok ] * additional_patch_for_2.6.13.diff size ;-) ... [ ok ] * checking ebuild checksums ;-) ... [ ok ] * checking auxfile checksums ;-) ... [ ok ] * checking miscfile checksums ;-) ... [ ok ] * checking netfilter-layer7-v2.9.tar.gz ;-) ... [ ok ] * checking additional_patch_for_2.6.13.diff ;-) ... [ ok ] * Determining the location of the kernel source code * Found kernel source directory: * /usr/src/linux * Found sources for kernel version: * 2.6.20-gentoo-r6 * This may not work with all kernels. If it does not work please enter a bug at bugs.gentoo.org * This only patches the current kernel source code. (/usr/src/linux) * Its up to you to recompile the kernel with the l7 options * * You will also need to emerge iptables with the "extensions" or * "l7filter" USE flag (depend which version of iptables you emerge) >>> Unpacking source... >>> Unpacking netfilter-layer7-v2.9.tar.gz to /var/tmp/portage/net-misc/l7-filter-2.9/work * Applying kernel-2.6.18-2.6.19-layer7-2.9.patch ... [ ok ] >>> Source unpacked. >>> Compiling source in /var/tmp/portage/net-misc/l7-filter-2.9/work/netfilter-layer7-v2.9 ... * no compiling - just patching source >>> Source compiled. >>> Test phase [not enabled]: net-misc/l7-filter-2.9 >>> Install l7-filter-2.9 into /var/tmp/portage/net-misc/l7-filter-2.9/image/ category net-misc >>> Completed installing l7-filter-2.9 into /var/tmp/portage/net-misc/l7-filter-2.9/image/ >>> Merging net-misc/l7-filter-2.9 to / --- /usr/ --- /usr/src/ --- /usr/src/testing/ --- /usr/src/testing/net/ --- /usr/src/testing/net/ipv4/ --- /usr/src/testing/net/ipv4/netfilter/ >>> /usr/src/testing/net/ipv4/netfilter/ip_conntrack_core.c >>> /usr/src/testing/net/ipv4/netfilter/ipt_layer7.c >>> /usr/src/testing/net/ipv4/netfilter/Makefile >>> /usr/src/testing/net/ipv4/netfilter/Makefile.orig >>> /usr/src/testing/net/ipv4/netfilter/ip_conntrack_core.c.orig >>> /usr/src/testing/net/ipv4/netfilter/Kconfig >>> /usr/src/testing/net/ipv4/netfilter/ip_conntrack_standalone.c >>> /usr/src/testing/net/ipv4/netfilter/ip_conntrack_standalone.c.orig >>> /usr/src/testing/net/ipv4/netfilter/regexp/ >>> /usr/src/testing/net/ipv4/netfilter/regexp/regsub.c >>> /usr/src/testing/net/ipv4/netfilter/regexp/regmagic.h >>> /usr/src/testing/net/ipv4/netfilter/regexp/regexp.c >>> /usr/src/testing/net/ipv4/netfilter/regexp/regexp.h >>> /usr/src/testing/net/ipv4/netfilter/Kconfig.orig --- /usr/src/testing/include/ --- /usr/src/testing/include/linux/ --- /usr/src/testing/include/linux/netfilter_ipv4/ >>> /usr/src/testing/include/linux/netfilter_ipv4/ipt_layer7.h >>> /usr/src/testing/include/linux/netfilter_ipv4/ip_conntrack.h.orig >>> /usr/src/testing/include/linux/netfilter_ipv4/ip_conntrack.h --- /usr/share/ --- /usr/share/doc/ >>> /usr/share/doc/l7-filter-2.9/ >>> /usr/share/doc/l7-filter-2.9/README.bz2 >>> /usr/share/doc/l7-filter-2.9/CHANGELOG.bz2 * This may not work with all kernels. If it does not work please enter a bug at bugs.gentoo.org * This only patches the current kernel source code. (/usr/src/linux) * Its up to you to recompile the kernel with the l7 options * * You will also need to emerge iptables with the "extensions" or * "l7filter" USE flag (depend which version of iptables you emerge) >>> net-misc/l7-filter-2.9 merged. >>> Recording net-misc/l7-filter in "world" favorites file... >>> No packages selected for removal by clean >>> Auto-cleaning packages... >>> No outdated packages were found on your system. * GNU info directory index is up-to-date.
bug known upstream. Upstream is moving towards developing l7-filter-userspace. I'd try transitioning to this. Once l7-filter stops being developed it will be quickly removed from gentoo.
let me know if upstream fix it.
