Use new strongSwan HA kernel patchset keeping iptables ABI

Allows us to install stock debian iptables without the need for patching and compiling our own.
2013-03-26 10:31:29 +01:00
parent b5f3c1f785
commit c59f3dcb68
4 changed files with 2 additions and 101 deletions
@@ -1,61 +0,0 @@
-From 4553ba0130bb9f0aa266cc1e4c3288a52f34eed6 Mon Sep 17 00:00:00 2001
-From: Martin Willi <[email protected]>
-Date: Wed, 7 Apr 2010 11:40:15 +0200
-Subject: [PATCH] Added XFRM hooks to iptables headers
-
---
- include/linux/netfilter.h      |    2 ++
- include/linux/netfilter_ipv4.h |    6 +++++-
- include/linux/netfilter_ipv6.h |    6 +++++-
- 3 files changed, 12 insertions(+), 2 deletions(-)
-
-diff --git a/include/linux/netfilter.h b/include/linux/netfilter.h
-index 2eb00b6..b692c67 100644
--- a/include/linux/netfilter.h
-+++ b/include/linux/netfilter.h
-@@ -35,6 +35,8 @@ enum nf_inet_hooks {
- 	NF_INET_FORWARD,
- 	NF_INET_LOCAL_OUT,
- 	NF_INET_POST_ROUTING,
-+	NF_INET_XFRM_IN,
-+	NF_INET_XFRM_OUT,
- 	NF_INET_NUMHOOKS
- };
- 
-diff --git a/include/linux/netfilter_ipv4.h b/include/linux/netfilter_ipv4.h
-index 4d7ba3e..28d3ca9 100644
--- a/include/linux/netfilter_ipv4.h
-+++ b/include/linux/netfilter_ipv4.h
-@@ -47,7 +47,11 @@
- #define NF_IP_LOCAL_OUT		3
- /* Packets about to hit the wire. */
- #define NF_IP_POST_ROUTING	4
-#define NF_IP_NUMHOOKS		5
-+/* Packets going into XFRM input transformation. */
-+#define NF_IP_XFRM_IN		5
-+/* Packets going into XFRM output transformation. */
-+#define NF_IP_XFRM_OUT		6
-+#define NF_IP_NUMHOOKS		7
- 
- enum nf_ip_hook_priorities {
- 	NF_IP_PRI_FIRST = INT_MIN,
-diff --git a/include/linux/netfilter_ipv6.h b/include/linux/netfilter_ipv6.h
-index 7430b39..18590a5 100644
--- a/include/linux/netfilter_ipv6.h
-+++ b/include/linux/netfilter_ipv6.h
-@@ -51,7 +51,11 @@
- #define NF_IP6_LOCAL_OUT		3
- /* Packets about to hit the wire. */
- #define NF_IP6_POST_ROUTING	4
-#define NF_IP6_NUMHOOKS		5
-+/* Packets going into XFRM input transformation. */
-+#define NF_IP6_XFRM_IN		5
-+/* Packets going into XFRM output transformation. */
-+#define NF_IP6_XFRM_OUT		6
-+#define NF_IP6_NUMHOOKS		7
- 
- 
- enum nf_ip6_hook_priorities {
-- 
-1.6.3.3
-