kamil.orchia.pl

Zainstalować/ściągnąć i uruchomić:

aptitude install kernel-package libncurses5-dev fakeroot wget bzip2 build-essential patch time checkinstall
cd /usr/src
apt-get source linux-image-2.6.32-5-amd64
ln -s /usr/src/linux-2.6-2.6.32 /usr/src/linux
apt-get source iptables
ln -s iptables-1.4.8 iptables
cd /usr/src/iptables
wget http://www.linuximq.net/patches/iptables-1.4.10-imq.patch
patch -p1 < iptables-1.4.10-imq.patch
cd /usr/src/linux
wget --no-check-certificate  https://dev.openwrt.org/export/18900/trunk/target/linux/generic-2.6/patches-2.6.32/100-netfilter_layer7_2.21.patch
patch -p1 < 100-netfilter_layer7_2.21.patch
wget http://www.linuximq.net/patches/linux-2.6.32-imq-test2.diff
patch  -p1 < linux-2.6.32-imq-test2.diff
cp /boot/config-2.6.32-5-amd64 .config
make menuconfig

Zaznaczyć:

Device Drivers  ---> 
 -*- Network device support  ---> 
   <M>   IMQ (intermediate queueing device) support 
     IMQ behavior (PRE/POSTROUTING) (IMQ AB)  ---> 
       (X) IMQ AB 
     (16)    Number of IMQ devices

-*- Networking support  ---> 
     Networking options  ---> 
     [*] Network packet filtering framework (Netfilter)  ---> 
       Core Netfilter Configuration  ---> 
       <M> Netfilter connection tracking support 
       <M> "layer7" match support

Kompilacja kernela:

cp /usr/src/linux/include/linux/netfilter/xt_layer7.h /usr/src/iptables/extensions/
fakeroot time make-kpkg --initrd --append_to_version=-layer7-imq-amd64 linux-image

Kompilacja iptables:

cd /tmp
wget http://downloads.sourceforge.net/project/l7-filter/l7-filter%20kernel%20version/2.22/netfilter-layer7-v2.22.tar.gz
tar -zxvf netfilter-layer7-v2.22.tar.gz
cp /tmp/netfilter-layer7-v2.22/iptables-1.4.3forward-for-kernel-2.6.20forward/libxt_layer7.* /usr/src/iptables/extensions/ 
cp /usr/src/linux/include/linux/netfilter/xt_layer7.h /usr/src/iptables/extensions/
cd /usr/src/iptables
./configure --with-ksource=/usr/src/linux --prefix=/usr --with-xtlibdir=/lib/xtables --libdir=/lib --enable-libipq --enable-devel
make
checkinstall
cd /tmp
wget http://ufpr.dl.sourceforge.net/sourceforge/l7-filter/l7-protocols-2009-05-28.tar.gz
tar -zxvf l7-protocols-2009-05-28.tar.gz
mv l7-protocols-2009-05-28 /etc/l7-protocols

Instalacja IPP2P:

aptitude install xtables-addons-common

Instalacja Kernela i iptables:

dpkg -i /usr/src/linux-image-2.6.32-layer7-imq-amd64_2.6.32-layer7-imq-amd64-10.00.Custom_amd64.deb
dpkg -i dpkg -i /usr/src/iptables/iptables_*.deb

Wymagany restart Debiana.