Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 59121 - request: l7-filter (Layer 7 iptables) kernel module ebuild
Summary: request: l7-filter (Layer 7 iptables) kernel module ebuild
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Daniel Black (RETIRED)
Depends on:
Blocks: 50462
  Show dependency tree
Reported: 2004-08-01 23:15 UTC by Andrew Gaffney (RETIRED)
Modified: 2004-10-20 12:14 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

l7-filter-0.9.1.ebuild (broken that I started on) (l7-filter-0.9.1.ebuild,1.32 KB, text/plain)
2004-08-07 06:36 UTC, Daniel Black (RETIRED)
l7-filter-0.9.1.ebuild [ Still Broken ] (l7-filter-0.9.1.ebuild,1.31 KB, text/plain)
2004-08-16 14:00 UTC, S.Caglar Onur
l7-filter-0.9.1.ebuild (l7-filter-0.9.1.ebuild,1.25 KB, text/plain)
2004-08-16 14:19 UTC, S.Caglar Onur

Note You need to log in before you can comment on or make changes to this bug.
Description Andrew Gaffney (RETIRED) gentoo-dev 2004-08-01 23:15:03 UTC
There is a pretty nifty iptables module that allows for layer 7 (protocol level) matching using iptables. The website is <>. I haven't used it yet, so I don't know how stable it is. It only needs a kernel patch and an iptables patch to function, though.

Reproducible: Always
Steps to Reproduce:
Comment 1 Daniel Black (RETIRED) gentoo-dev 2004-08-02 02:01:07 UTC
Related to bug #48903 and bug #50462

Since its inclusion has already been rejected (gentoo-sources were getting too complicate) this realy needs a kernel module ebuild. Please look at the references an try to make one. Any questions/drafts please ask.
Comment 2 Andrew Gaffney (RETIRED) gentoo-dev 2004-08-02 09:48:16 UTC
It also needs an iptables patch. If I were to write an ebuild to compile it as a separate kernel module, how would I handle patching iptables?
Comment 3 Andrew Gaffney (RETIRED) gentoo-dev 2004-08-02 09:51:34 UTC
Nevermind. Iptables is apparently already patches according to bug #39761
Comment 4 S.Caglar Onur 2004-08-07 06:22:28 UTC
I'll try to make an ebuild for l7, but i dont think it will work because it seems like will not work while its module :)
Comment 5 Daniel Black (RETIRED) gentoo-dev 2004-08-07 06:36:52 UTC
Created attachment 36950 [details]
l7-filter-0.9.1.ebuild (broken that I started on)

broken version I started on.
Comment 6 Daniel Black (RETIRED) gentoo-dev 2004-08-07 06:46:14 UTC

Peter (aka latexer) mentioned the way 2.6 kernels changed - something to do with using M=.

Anyway good luck. And don't go all out for a perfect solution.
Comment 7 S.Caglar Onur 2004-08-16 14:00:47 UTC
Created attachment 37556 [details]
l7-filter-0.9.1.ebuild [ Still Broken ]
Comment 8 S.Caglar Onur 2004-08-16 14:19:21 UTC
Created attachment 37558 [details]

Now it's working :)))
Comment 9 Daniel Black (RETIRED) gentoo-dev 2004-08-17 02:32:29 UTC
Added a few warnings. BTW a error with the prev version ${D} shouldn't be used with do.. commands - its implicit.

Comment 10 Stefan Schweizer (RETIRED) gentoo-dev 2004-10-20 12:14:11 UTC
Is this really necessary?
It uses the obselete kmod system, which we want to remove.

Can we not just tell the user to patch the kernel and the command to do so?