the ebuild for iptables supports IMQ (The intermediate queueing device see http://luxik.cdi.cz/~patrick/imq/ ). This is nice and I believe this used to work in older ebuilds. However with 1.2.7-r3 there seems to be a bit of a vicious circle: The ebuild checks whether the patch for imq has been applied to the kernel sources, if it hasn't it won't apply the patches to it's extra directory for patch-o-matic and in turn won't add the options to the kernel config. I'm wondering now how is anyone supposed to get the benefits of imq by simply emerging gentoo-sources and iptables? It doesn't appear possible. Instead one rather clumsly has to follow the advice on http://www.vanderploeg.net/netshaper/ to apply pom-imq via patch-o-matic to the kernel source tree, then emerge iptables will recognize that imq support is there and then it will build it. The easiest solution would possibly be to add a profile flag for IMQ. If it's either solution a) iptables would patch the sources to add the options in the kernel or b) imq support could be merged with gentoo-sources patches but only installs itself it the flag is set. Reproducible: Always Steps to Reproduce: 1. 2. 3.
This is not an iptables issue, but a missing patch from kernel. I've read through the guide at http://www.vanderploeg.net/netshaper/ and you only have to carry out the kernel patch bit. Once the kernel is patched you only have to re-emerge iptables. If memory serves me correctly imq was included in gentoo-sources before, but I don't know why it was removed.
well, it hasn't been in gentoo-sources for @ least a year and iptables 1.2.7-r3 wasn't there @ that time :) - from talking with past maintainers, this was *never* in gentoo-sources. and i just scoured the past sources back to 2.4.19-r7... Now, until there is support in our kernel, the iptables person(s) needs to fix the ebuild. I will add support for this in pfeifer-sources-2.4.20_pre10 which will eventually become gentoo-sources-2.4.20.1-r4. Jay
ok, IMQ is patched into pfeifer-sources-2.4.20_pre10 - i'll add it to portage after i test a few other patches i've reworked. Jay
ok, if you need imq now - use pfeifer-sources-2.4.20_pre10 - it is portage and contains support for the imq base patch and the imq ipv4 & ipv6 ipt patches. pre10 is close to becoming gentoo-sources-2.4.20.1-r4. Jay
Thank for you for including this in the upcoming gentoo-kernel! Good work.
