[Xen-users] netfilter matches missing in kernel 2.4.30

["John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>]

Hello, all.  We are using xen 2.0.7 on Fedora Core 3.  We have a domU
built on 2.4.30 although all other domUs and the dom0 are on 2.6
kernels.  The 2.4.30 kernel says it is using iptables 1.2.11.  This
version of netfilter should include several patches which are important
to us in the ISCS network security management project
(http://iscs.sourceforge.net) such as iprange, NETMAP and
tcp-window-tracking.  However, when we try them from the command line,
they fail saying that the match or target is not available.

We then thought that we had not enabled them in the kernel.  However,
when we do 
make ARCH=xen menuconfig
we do not see these options in the kernel configuration.  When we look
at non-Xen kernels, we see these options.

Is there a reason why these are missing? How do we get them? I'm a
little hesitant to apply an old patch-o-matic to a kernel which is
supposed to have these features already in the code.  Thanks - John
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan@xxxxxxxxxxxxxxxxxxx

Financially sustainable open source development
http://www.opensourcedevel.com


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users