[SOLVED] 4.15.17-3-pve und xtables-addons für iptables

F

Fiesi

Member
Mar 18, 2018
12
0
21
48
Moin,

Ich versuche schon seit einer weile geoip für iptables zum laufen zu bekommen.

Aber irgendwie motzt er immer rum mit dem Header.
Viell hat ja jemand noch eine Lösung parat oder kann mir sagen welcher Kernel mit xtables wieder läuft ;)

Hier mal das Log:

Code: 
root@host /usr/src # module-assistant --verbose --text-mode auto-install xtables-addons

xtables-addons
Updating info about xtables-addons-source

Updated infos about 1 packages
Getting source for kernel version: 4.15.17-3-pve
Kernel headers available in /usr/src/linux-headers-4.15.17-3-pve
Creating symlink...
apt-get install build-essential
Reading package lists... Done
Building dependency tree
Reading state information... Done
build-essential is already the newest version (12.3).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

Done!
unpack
Removing old /usr/src/modules/xtables-addons/ tree
 rm -rf /usr/src/modules/xtables-addons
Extracting the package tarball, /usr/src/xtables-addons.tar.bz2, please wait...
 tar --bzip2 -x -f /usr/src/xtables-addons.tar.bz2
"/usr/share/modass/packages/default.sh" build KVERS=4.15.17-3-pve KSRC=/usr/src/linux kdist_image
 debian/rules kdist_clean
/usr/bin/make -C /usr/src/linux M=/usr/src/modules/xtables-addons/extensions XA_ABSTOPSRCDIR=/usr/src/modules/xtables-addons XA_TOPSRCDIR=/usr/src/modules/xtables-addons DEPMOD=/bin/true clean
make[1]: Entering directory '/usr/src/linux-headers-4.15.17-3-pve'
make[1]: Leaving directory '/usr/src/linux-headers-4.15.17-3-pve'
dh_prep
dh_clean
 debian/rules KVERS=4.15.17-3-pve KSRC=/usr/src/linux kdist_image
/usr/bin/make  -f debian/rules kdist_clean kdist_config binary-modules
make[1]: Entering directory '/usr/src/modules/xtables-addons'
/usr/bin/make -C /usr/src/linux M=/usr/src/modules/xtables-addons/extensions XA_ABSTOPSRCDIR=/usr/src/modules/xtables-addons XA_TOPSRCDIR=/usr/src/modules/xtables-addons DEPMOD=/bin/true clean
make[2]: Entering directory '/usr/src/linux-headers-4.15.17-3-pve'
make[2]: Leaving directory '/usr/src/linux-headers-4.15.17-3-pve'
dh_prep
dh_clean
for templ in ; do \
    cp $templ `echo $templ | sed -e 's/_KVERS_/4.15.17-3-pve/g'` ; \
  done
for templ in `ls debian/*.modules.in` ; do \
    test -e ${templ%.modules.in}.backup || cp ${templ%.modules.in} ${templ%.modules.in}.backup 2>/dev/null || true; \
    sed -e 's/##KVERS##/4.15.17-3-pve/g ;s/#KVERS#/4.15.17-3-pve/g ; s/_KVERS_/4.15.17-3-pve/g ; s/##KDREV##//g ; s/#KDREV#//g ; s/_KDREV_//g  ' < $templ > ${templ%.modules.in}; \
  done
dh binary-arch
   dh_testdir -a
   dh_update_autotools_config -a
   dh_auto_configure -a
   debian/rules override_dh_auto_build
make[2]: Entering directory '/usr/src/modules/xtables-addons'
dh_auto_build -- -C /usr/src/linux M=/usr/src/modules/xtables-addons/extensions XA_ABSTOPSRCDIR=/usr/src/modules/xtables-addons XA_TOPSRCDIR=/usr/src/modules/xtables-addons DEPMOD=/bin/true
        make -j1 -C /usr/src/linux M=/usr/src/modules/xtables-addons/extensions XA_ABSTOPSRCDIR=/usr/src/modules/xtables-addons XA_TOPSRCDIR=/usr/src/modules/xtables-addons DEPMOD=/bin/true
make[3]: Entering directory '/usr/src/linux-headers-4.15.17-3-pve'
  CC [M]  /usr/src/modules/xtables-addons/extensions/compat_xtables.o
  CC [M]  /usr/src/modules/xtables-addons/extensions/xt_CHAOS.o
  CC [M]  /usr/src/modules/xtables-addons/extensions/xt_DELUDE.o
  CC [M]  /usr/src/modules/xtables-addons/extensions/xt_DHCPMAC.o
  CC [M]  /usr/src/modules/xtables-addons/extensions/xt_DNETMAP.o
/usr/src/modules/xtables-addons/extensions/xt_DNETMAP.c: In function ‘dnetmap_tg’:
/usr/src/modules/xtables-addons/extensions/xt_DNETMAP.c:380:2: error: implicit declaration of function ‘NF_CT_ASSERT’ [-Werror=implicit-function-declaration]
  NF_CT_ASSERT(hooknum == NF_INET_POST_ROUTING ||
  ^~~~~~~~~~~~
cc1: some warnings being treated as errors
scripts/Makefile.build:331: recipe for target '/usr/src/modules/xtables-addons/extensions/xt_DNETMAP.o' failed
make[4]: *** [/usr/src/modules/xtables-addons/extensions/xt_DNETMAP.o] Error 1
Makefile:1552: recipe for target '_module_/usr/src/modules/xtables-addons/extensions' failed
make[3]: *** [_module_/usr/src/modules/xtables-addons/extensions] Error 2
make[3]: Leaving directory '/usr/src/linux-headers-4.15.17-3-pve'
dh_auto_build: make -j1 -C /usr/src/linux M=/usr/src/modules/xtables-addons/extensions XA_ABSTOPSRCDIR=/usr/src/modules/xtables-addons XA_TOPSRCDIR=/usr/src/modules/xtables-addons DEPMOD=/bin/true returned exit code 2
debian/rules:51: recipe for target 'override_dh_auto_build' failed
make[2]: *** [override_dh_auto_build] Error 2
make[2]: Leaving directory '/usr/src/modules/xtables-addons'
debian/rules:48: recipe for target 'binary-modules' failed
make[1]: *** [binary-modules] Error 2
make[1]: Leaving directory '/usr/src/modules/xtables-addons'
/usr/share/modass/include/common-rules.make:56: recipe for target 'kdist_build' failed
make: *** [kdist_build] Error 2
BUILD FAILED!
See /var/cache/modass/xtables-addons-source.buildlog.4.15.17-3-pve.1529326287 for details.
Build failed. Press Return to continue...

Edit:
Versionen:

Code: 
root@host ~ # pveversion -v
proxmox-ve: 5.2-2 (running kernel: 4.15.17-3-pve)
pve-manager: 5.2-2 (running version: 5.2-2/b1d1c7f4)
pve-kernel-4.15: 5.2-3
pve-kernel-4.13: 5.1-45
pve-kernel-4.15.17-3-pve: 4.15.17-12
pve-kernel-4.13.16-3-pve: 4.13.16-49
pve-kernel-4.13.13-6-pve: 4.13.13-42
corosync: 2.4.2-pve5
criu: 2.11.1-1~bpo90
glusterfs-client: 3.8.8-1
ksm-control-daemon: not correctly installed
libjs-extjs: 6.0.1-2
libpve-access-control: 5.0-8
libpve-apiclient-perl: 2.0-4
libpve-common-perl: 5.0-33
libpve-guest-common-perl: 2.0-16
libpve-http-server-perl: 2.0-9
libpve-storage-perl: 5.0-23
libqb0: 1.0.1-1
lvm2: 2.02.168-pve6
lxc-pve: 3.0.0-3
lxcfs: 3.0.0-1
novnc-pve: 1.0.0-1
proxmox-widget-toolkit: 1.0-19
pve-cluster: 5.0-27
pve-container: 2.0-23
pve-docs: 5.2-4
pve-firewall: 3.0-12
pve-firmware: 2.0-4
pve-ha-manager: 2.0-5
pve-i18n: 1.0-6
pve-libspice-server1: 0.12.8-3
pve-qemu-kvm: 2.11.1-5
pve-xtermjs: 1.0-5
qemu-server: 5.0-28
smartmontools: 6.5+svn4324-1
spiceterm: 3.0-5
vncterm: 1.5-3
 
Last edited:
Oder andere Frage, kann ich einen normalen kernel auch wieder installieren?
Oder brauch ich zwingend den pve-* ?

Es laufen keine CT's drauf - nur 2 WindowsGuest's.
 
Hab es nochmal weiter versucht.

Er bleibt immer wieder hängen.
Hat denn keiner ne Lösung parat ? ;)

Code: 
root@host /tmp # apt-get install xtables-addons-dkms
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  xtables-addons-dkms
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/284 kB of archives.
After this operation, 1,606 kB of additional disk space will be used.
Selecting previously unselected package xtables-addons-dkms.
(Reading database ... 174078 files and directories currently installed.)
Preparing to unpack .../xtables-addons-dkms_2.12-0.1_all.deb ...
Unpacking xtables-addons-dkms (2.12-0.1) ...
Setting up xtables-addons-dkms (2.12-0.1) ...
Loading new xtables-addons-2.12 DKMS files...
Building for 4.15.17-3-pve
Building initial module for 4.15.17-3-pve
Error!  Build of xt_ACCOUNT.ko failed for: 4.15.17-3-pve (x86_64)
Consult the make.log in the build directory
/var/lib/dkms/xtables-addons/2.12/build/ for more information.
root@host /tmp #
 
LnxBil said:
Vielleicht mal die Version von xtables-addons-dkms aus Ubuntu LTS versuchen?
Click to expand...

habs hinbekommen ^^

hab aber nun einfach mal die xtables-addons-dkms aus SID genommen.
Die gabs in Version 3 - sind nun im System drin und scheinen zu gehen ;)

Danke
 
Last edited:
oder es funzt auch nicht...
iptables kann zwar jetzt mit -m geoip umgehen aber i wie werden die Länder wohl doch nicht geblockt
 
Hatte einfach mal als Test TR "ausgesperrt" und per VPN (TR ausgewählt) auf Domain / SSH und Co. zugegriffen.
Kam weiter hin drauf.

hatte ebend nochmal rebootet. Hatte ich wohl vergessen gestern noch.
Nun werden die passenden Länder doch ausgesperrt ;)
 
Schön!
Auf jeden Fall eine gute Idee und muss ich mir auch mal genauer anschauen. Danke auch für das beschreiben was und wie es geklappt hat.
 
Falls du noch fragen hast, meld dich einfach ;)
Jedenfalls klappts soweit einwandfrei ;)
Muss nur das Logging wieder raus bekommen xD 5 GB Message LOG ist bissel groß :D
 
You must log in or register to reply here.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Quick Navigation

Home Get Subscription Wiki Downloads Proxmox Customer Portal About

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!
Community platform by XenForo® © 2010-2024 XenForo Ltd.
Top Bottom
Back