[问题求助]如何升级iptables? [复制链接]

因iptables-1.2.5与系统内核可能有问题，就想升级iptables，本人已下载iptables.-1.2.8.tar，不.知放在哪个目录来解包安装？.请各路高手指点！谢谢    外汇

安装文件放哪里都一样呀, 不过大家习惯放在/usr/local

我下载的是iptables-1.2.8.tar.tar文件，可是用#tar -zvxf iptables-1.2.8.tar.tar 就不行呀，出现如下错误：
[root@bhga root]# tar -zvxf iptables-1.2.8.tar.tar

gzip: stdin: not in gzip format
tar: Child returned status 1
tar: Error exit delayed from previous errors
[root@bhga root]#


是不是我的命令用错了？

QUOTE:原帖由 "ws35"]a root 发表：
#


是不是我的命令用错了？
    


tar xf  file.tar


你的文件不是压缩格式，不要用z参数。

不行呀!还是有错误：
# tar -xf iptables-1.2.8.tar.tar
tar: This does not look like a tar archive
tar: Skipping to next header
tar: Archive contains obsolescent base-64 headers
tar: Error exit delayed from previous errors
＃

怎么办呀？请各们指点!

file iptables-1.2.8.tar.tar
看看这倒底是什么格式的文件

[quote]原帖由 "ws35"]因iptables-1.2.5与系统内核可能有问题，就想升级iptables，本人已下载iptables-1.2.8.tar，不知放在哪个目录来解包安装？请各路高手指点！谢谢[/quote 发表：
    

是 bz2的，用tar -jxvf iptables-1.2.8.tar.tar
cd  iptables-1.2.8
export KERNEL_DIR=/usr/src/linux （内核源代码所在目录）
make
make install
这时的iptables命令是放在/usr/local/sbin目录下，你应将其拷贝到/sbin 下把旧的命令覆盖掉。

如果你要使用新功能，请先编译内核。

我不能执行iptables -t net ....命令，是不是我还没编译内核，怎么对内核进行编译？内核的文件是什么，在哪里？

我按上面bearzhang说的去做，可以解压并进入iptables-1.2.8这目录了，可是没有这个目录/usr/src/linux ，而有/usr/src/redhat这个目录，执行make和make install都出错如下：
[root@bhga iptables-1.2.8]# make
Extensions found:
cc -O2 -Wall -Wunused -I/usr/src/redhat/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.8\"  -fPIC -o extensions/libipt_conntrack_sh.o -c extensions/libipt_conntrack.c
In file included from extensions/libipt_conntrack.c:14:
include/linux/netfilter_ipv4/ipt_conntrack.h:28: `IP_CT_DIR_MAX' undeclared here (not in a function)
include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function)
include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function)
extensions/libipt_conntrack.c: In function `parse_status':
extensions/libipt_conntrack.c:103: `IPS_EXPECTED' undeclared (first use in this function)
extensions/libipt_conntrack.c:103: (Each undeclared identifier is reported only once
extensions/libipt_conntrack.c:103: for each function it appears in.)
extensions/libipt_conntrack.c:105: `IPS_SEEN_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c:107: `IPS_ASSURED' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `parse':
extensions/libipt_conntrack.c:202: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function)
extensions/libipt_conntrack.c:259: `IP_CT_DIR_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `print_status':
extensions/libipt_conntrack.c:364: `IPS_EXPECTED' undeclared (first use in this function)
extensions/libipt_conntrack.c:368: `IPS_SEEN_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c:372: `IPS_ASSURED' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `matchinfo_print':
extensions/libipt_conntrack.c:420: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function)
extensions/libipt_conntrack.c:440: `IP_CT_DIR_REPLY' undeclared (first use in this function)
make: *** [extensions/libipt_conntrack_sh.o] Error 1

[root@bhga iptables-1.2.8]# make install

cc -O2 -Wall -Wunused -I/usr/src/redhat/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.8\"  -fPIC -o extensions/libipt_conntrack_sh.o -c extensions/libipt_conntrack.c
In file included from extensions/libipt_conntrack.c:14:
include/linux/netfilter_ipv4/ipt_conntrack.h:28: `IP_CT_DIR_MAX' undeclared here (not in a function)
include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function)
include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function)
extensions/libipt_conntrack.c: In function `parse_status':
extensions/libipt_conntrack.c:103: `IPS_EXPECTED' undeclared (first use in this function)
extensions/libipt_conntrack.c:103: (Each undeclared identifier is reported only once
extensions/libipt_conntrack.c:103: for each function it appears in.)
extensions/libipt_conntrack.c:105: `IPS_SEEN_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c:107: `IPS_ASSURED' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `parse':
extensions/libipt_conntrack.c:202: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function)
extensions/libipt_conntrack.c:259: `IP_CT_DIR_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `print_status':
extensions/libipt_conntrack.c:364: `IPS_EXPECTED' undeclared (first use in this function)
extensions/libipt_conntrack.c:368: `IPS_SEEN_REPLY' undeclared (first use in this function)
extensions/libipt_conntrack.c:372: `IPS_ASSURED' undeclared (first use in this function)
extensions/libipt_conntrack.c: In function `matchinfo_print':
extensions/libipt_conntrack.c:420: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function)
extensions/libipt_conntrack.c:440: `IP_CT_DIR_REPLY' undeclared (first use in this function)
make: *** [extensions/libipt_conntrack_sh.o] Error 1
[root@bhga iptables-1.2.8]#


这又是什么原因？

/usr/src/linux 指的是你的内核源代码所在的目录，如果你的内核源代码是
/usr/src/Linux-2.4.20 这你的KERNEL_DIR应该为：
/usr/src/Linux-2.4.20