<DIV>Hi Sebastien,</DIV>
<DIV> </DIV>
<DIV>My apologies once again regarding my inexperience with building linux kernels. I've tried to implement your suggestion without success. Here is what I did.</DIV>
<DIV> </DIV>
<DIV># Build a clean kernel.</DIV>
<DIV>cd /usr/src/linux<BR>make mrproper<BR>cp configs/kernel-2.4.20-8.i686.config ./.config<BR>make xconfig # Just save and exit.<BR>make dep clean bzImage modules modules_install install</DIV>
<DIV> </DIV>
<DIV># Reboot using the new kernel.</DIV>
<DIV>cd /home/openswan</DIV>
<DIV>make menugo # Just save and exit. This appears to build a new kernel and install progs in the right place</DIV>
<DIV> </DIV>
<DIV>cd /usr/src/linux<BR>make modules_install<BR>make install # To install the new kernel.</DIV>
<DIV> </DIV>
<DIV># Reboot again to make sure kernel boots ok.</DIV>
<DIV> </DIV>
<DIV>cd /home/openswan</DIV>
<DIV># Apply the NAT-T patch.</DIV>
<DIV>make nattpatch | (cd /usr/src/linux && patch -p1 && make bzImage)</DIV>
<DIV> </DIV>
<DIV>cd /usr/src/linux</DIV>
<DIV>make install</DIV>
<DIV> </DIV>
<DIV># Reboot once again.</DIV>
<DIV> </DIV>
<DIV>cd /usr/src/linux<BR>make xconfig # Just save and exit<BR>make dep clean<BR>make bzImage # !!! This fails halfway through.</DIV>
<DIV>make dep clean<BR>make bzImage # Works this time<BR>make modules modules_install install</DIV>
<DIV> </DIV>
<DIV># Reboot one final time.</DIV>
<DIV> </DIV>
<DIV>After reboot, it fails with the same error.</DIV>
<DIV> </DIV>
<DIV>Am I doing something silly here?</DIV>
<DIV> </DIV>
<DIV>cheers</DIV>
<DIV> </DIV>
<DIV>Russ<BR><BR><B><I>Sebastian Zdrojewski <sebastian.zdrojewski@technomind.it></I></B> wrote:</DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">Sorry - I made a reply only instead of the reply-all :p<BR><BR>---<BR><BR>There is some kind of bug in that... I've experienced that too on 2.4.26 kernel<BR><BR>You need to:<BR><BR>1. build kernel normal way<BR>2. build kernel with openswan - make menugo)<BR>3. build kernel with nattpatch - make nattpatch | (cd /usr/src/linux && patch -p1 && make bzImage)<BR>4. build kernel again in normal way - make dep clean bzImage modules modules_install install<BR><BR>This will work<BR><BR>:-)<BR><BR>Cheers<BR><BR>Sebastian "En3pY" Zdrojewski<BR><BR><BR><BR><BR>Sebastian Zdrojewski <BR>Responsabile IT Gruppo<BR>Tel. +39 02 62610.317<BR>Mobile: +39 349.3304.311<BR>E-mail: sebastian.zdrojewski@technomind.it<BR><BR><BR> <BR>TECHNOMIND S.p.A.<BR>Via G. Galilei 7 - 20124 Milano<BR>Tel. +39 02 62610.300 - Fax. +39 02 62610.333<BR>Web: http://www.technomind.it
<BR><BR><BR>-----Messaggio originale-----<BR>Da: users-bounces@lists.openswan.org [mailto:users-bounces@lists.openswan.org] Per conto di RUSSELL WHITEAR<BR>Inviato: marted́ 11 maggio 2004 13.27<BR>A: users@lists.openswan.org<BR>Oggetto: [Openswan Users] Help required applying NAT-T patch to 2.4.20-8 kernel<BR><BR>Hi,<BR> <BR>I am new to this list and also do not have much experience with compiling linux kernels, so my apologies if this has already been answered ( I've checked through the list archives for a solution, but couldn't find anything).<BR> <BR>I am trying to apply the NAT-T patch to the RedHat9 distribution kernel (2.4.20-8) without success. The kernel compiles and boots fine, but I get the following error message reported when pluto control debug is applied:<BR> <BR>ipsec__plutorun: 003 NAT-Traversal: ESPINUDP(1) not supported by kernel -- NAT-T disabled <BR> <BR>I have included below, the exact command sequence that I have been performing. Any
ideas
would be most welcome.<BR> <BR>thanks<BR> <BR>Russ<BR> <BR><BR># Install kernel source RPM from RedHat9 distribution CD.<BR>rpm -i /mnt/cdrom/RedHat/RPMS/kernel-source-24.20-8<BR> <BR>cd /usr/src<BR> <BR>ln -s ./linux-2.4.20-8 ./linux<BR> <BR>cd linux<BR> <BR>make mrproper<BR> <BR>cp configs/kernel-2.4.20-i686.config ./.config<BR> <BR>make xconfig # Just Save and Exit<BR> <BR>make dep<BR>......<BR> <BR>make clean<BR>......<BR> <BR>cd /home/openswan-2.1.2rc3<BR> <BR># Apply OpenS/WAN NAT-T patch and compile new bzImage.<BR>make nattpatch | ( cd /usr/src/linux && patch -p1 && make bzImage )<BR> <BR>patching file include/net/sock.h<BR>Hunk #1 succeeded at 252 (offset 7 lines).<BR>Hunk #2 succeeded at 593 (offset 3 lines).<BR>patching file net/Config.in<BR>Hunk #1 succeeded at 101 (offset 13 lines).<BR>patching file net/ipv4/udp.c<BR>Hunk #1
succeeded at 798 (offset 11 lines).<BR>Hunk #3 succeeded at 1075 (offset 11 lines).<BR>gcc -Wall -Wstrict-prototypes -O2 -fomit-frame-pointer -o scripts/split-include scripts/split-include.c<BR>scripts/split-include include/linux/autoconf.h include/config<BR>......<BR><BR>cd /usr/src/linux<BR> <BR>make modules<BR>......<BR> <BR>make modules_install<BR>......<BR> <BR>cd /home/openswan-2.1.2rc3<BR> <BR>make KERNELSRC=/usr/src/linux programs module<BR>......<BR> <BR>make KERNELSRC=/usr/src/linux install minstall<BR>......<BR> <BR>cd /usr/src/linux<BR> <BR>make install<BR>......<BR> <BR># REBOOT NEW KERNEL<BR> <BR>service ipsec restart<BR> <BR>ipsec_setup: Stopping Openswan IPsec...<BR>ipsec_setup: Starting Openswan IPsec 2.1.2rc3...<BR>ipsec_setup: Using /lib/modules/2.4.20-8-test/kernel/ipsec.o<BR> <BR>tail /var/log/messages<BR># NAT-T error as displayed in /var/log/messages.<BR>May 11 11:38:08 testarossa ipsec_setup: ...O
penswan
IPsec started<BR>May 11 11:38:08 testarossa ipsec__plutorun: 003 NAT-Traversal: ESPINUDP(1) not supported by kernel -- NAT-T disabled<BR> <BR> <BR> <BR>_______________________________________________<BR>Users mailing list<BR>Users@lists.openswan.org<BR>http://lists.openswan.org/mailman/listinfo/users</BLOCKQUOTE>