Log in

Bekijk de volledige versie : How to make netfilter-layer7 functional



sonice
25-10-2010, 19:22
Different QoS scripts just do not work for me as my internet speed drops down 5-7 times!

I am just wondering how can I make netfilter-layer7 functional?

I have got 1.9.2.7-rtn-r1943.trx

Downloaded netfilter-layer7-v2.22.tar.gz from here-

wget http://sourceforge.net/projects/l7-filter/files/l7-filter%20kernel%20version/2.22/netfilter-layer7-v2.22.tar.gz/download

I have

uname -a
Linux Asus 2.6.22.19 #1 Sun Aug 15 14:55:34 YEKST 2010 mips GNU/Linux



vi README
- iptables-1.4.3forward-for-kernel-2.6.20forward/libxt_layer7.{c,man}

Use these files if you are compiling iptables 1.4.3 or later against Linux
2.6.20 or later.

- for_older_iptables/

Use these files if you are using an older version of iptables or Linux.
Note that not all combinations are supported. This includes, but is not
limited to:

-- Compiling iptables 1.4.x against Linux 2.6.19.x or earlier.

-- iptables 1.4.1, period.


General notes:

- You do NOT need to recompile iptables if you change your running kernel
version across the 2.6.20 boundary and you already have a working iptables.

- You DO need to recompile iptables if you switch from a kernel patched
with l7-filter <= v2.10 to one patched with l7-filter >= v2.11.

My iptables v1.3.8 but I do not know where "patched kernel source"?

iptables 1.4.0 and older

Use the appropriate iptables patch to to patch[1] iptables. Compile iptables, pointing it at your patched kernel source:

Run "chmod +x extensions/.layer7-test" (information about file permissions can't be contained in the patch)
Then "make KERNEL_DIR=/path/to/patched/kernel_source" (you must have configured your kernel source before this step)
And install (as root): "make install KERNEL_DIR=/path/to/patched/kernel_source"

How to compile into your kernel module ip_conntrack_netlink or nf_conntrack_netlink?

Either way, you need either the module ip_conntrack_netlink or nf_conntrack_netlink or the same code compiled into your kernel.

Could someone help me with this?

wpte
25-10-2010, 20:08
You cannot compile this on your router

You need to compile this from the sources of oleg firmware.
http://code.google.com/p/wl500g/wiki/CompilingCustomFirmware

But just to let you know, QoS won't stop making your internet drop:rolleyes:
QoS tries to make sure some packages have a higher priority so that things like skype won't stutter:)