Requirements:
- Linux 2.6.x kernel sources between 2.6.11 and 2.6.13
(for 2.6.14 you need an additional patch from the downloads section)
Installing nf-HiPAC:
- Apply additional patches to nf-HiPAC:
Sometimes after a release has been made minor bugs are discovered which are just too negligible to justify a new release. Since we try to fix these small issues as soon as they are known we want to offer you the possibility to benefit from the fix. Please check the downloads section for additional patches before proceeding. - Apply the nf-HiPAC kernel patch:
If you don't apply the patch against a vanilla 2.6.13 some "hunks" and even "fuzzes" may occur during the patching process. You can generously ignore them as long as the patch applies and the compilation afterwards succeeds.
Example:cd /usr/src/linux
patch -p1 -F3 < /usr/src/nf-hipac-0.9.1/nf-hipac-0.9.1.patch - Configure your kernel and enable nf-HiPAC:
You can find the nf-hipac option in the "Netfilter Configuration" sub menu after you have enabled "IP tables support". Don't forget to also enable all the iptables matches and targets that you want to use with nf-HiPAC and for which nf-HiPac does not already offer native implementations. - Compile, install and boot your nf-HiPAC enabled kernel.
- Compile and install the nf-HiPAC userspace tool:
Assuming that you want to install nf-hipac to /usr/local and that the iptables userspace modules are located under /lib/iptables you have to type as root:
This builds the userspace tool with support for iptables 1.3.x. If you instead want to compile with support for iptables 1.2.x you have to type:make install PREFIX=/usr/local IPT_LIB_DIR=/lib/iptables
Please remember to recompile the nf-hipac userspace tool as soon as you update your iptables 1.2.x to 1.3.x. Otherwise you will experience segfaults of the nf-hipac userspace tool when using iptables matches or targets.make install PREFIX=/usr/local IPT_LIB_DIR=/lib/iptables IPTABLES_1_2=true