===== Kernel 2.6 + IMQ + Layer7 + IPP2P=====
Zainstalować/ściągnąć i uruchomić:
aptitude install kernel-package libncurses5-dev fakeroot wget bzip2 build-essential patch time checkinstall
cd /usr/src
apt-get source linux-image-2.6.32-5-amd64
ln -s /usr/src/linux-2.6-2.6.32 /usr/src/linux
apt-get source iptables
ln -s iptables-1.4.8 iptables
cd /usr/src/iptables
wget http://www.linuximq.net/patches/iptables-1.4.10-imq.patch
patch -p1 < iptables-1.4.10-imq.patch
cd /usr/src/linux
wget --no-check-certificate https://dev.openwrt.org/export/18900/trunk/target/linux/generic-2.6/patches-2.6.32/100-netfilter_layer7_2.21.patch
patch -p1 < 100-netfilter_layer7_2.21.patch
wget http://www.linuximq.net/patches/linux-2.6.32-imq-test2.diff
patch -p1 < linux-2.6.32-imq-test2.diff
cp /boot/config-2.6.32-5-amd64 .config
make menuconfig
Zaznaczyć:
Device Drivers --->
-*- Network device support --->
IMQ (intermediate queueing device) support
IMQ behavior (PRE/POSTROUTING) (IMQ AB) --->
(X) IMQ AB
(16) Number of IMQ devices
-*- Networking support --->
Networking options --->
[*] Network packet filtering framework (Netfilter) --->
Core Netfilter Configuration --->
Netfilter connection tracking support
"layer7" match support
Kompilacja kernela:
cp /usr/src/linux/include/linux/netfilter/xt_layer7.h /usr/src/iptables/extensions/
fakeroot time make-kpkg --initrd --append_to_version=-layer7-imq-amd64 linux-image
Kompilacja iptables:
cd /tmp
wget http://downloads.sourceforge.net/project/l7-filter/l7-filter%20kernel%20version/2.22/netfilter-layer7-v2.22.tar.gz
tar -zxvf netfilter-layer7-v2.22.tar.gz
cp /tmp/netfilter-layer7-v2.22/iptables-1.4.3forward-for-kernel-2.6.20forward/libxt_layer7.* /usr/src/iptables/extensions/
cp /usr/src/linux/include/linux/netfilter/xt_layer7.h /usr/src/iptables/extensions/
cd /usr/src/iptables
./configure --with-ksource=/usr/src/linux --prefix=/usr --with-xtlibdir=/lib/xtables --libdir=/lib --enable-libipq --enable-devel
make
checkinstall
cd /tmp
wget http://ufpr.dl.sourceforge.net/sourceforge/l7-filter/l7-protocols-2009-05-28.tar.gz
tar -zxvf l7-protocols-2009-05-28.tar.gz
mv l7-protocols-2009-05-28 /etc/l7-protocols
Instalacja IPP2P:
aptitude install xtables-addons-common
Instalacja Kernela i iptables:
dpkg -i /usr/src/linux-image-2.6.32-layer7-imq-amd64_2.6.32-layer7-imq-amd64-10.00.Custom_amd64.deb
dpkg -i dpkg -i /usr/src/iptables/iptables_*.deb
Wymagany restart Debiana.