RHEL5不编译内核增加connlimit模块.doc

RHEL5不编译内核增加connlimit模块 前言 RHEL 5 的kernel rpm包并不包含完整的source code，所以按照以前版本的编译方法是不能成功的。根据fedora的release notes的说明，需要增加新的模块的时候，只需要新建一个Makefile，然后make这个模块就好了（RHEL 5的release notes应该也有提到，但我没有查证）（fedora 5的release notes： /release-notes/fc5/release-notes-ISO/#id3098172）。Red Hat Enterprise Linux Server release 5 (Tikanga) 内核源码路径：/usr/src/kernels/2.6.18-8.el5-i686 iptables-1.4.0.tar.bz2 #下载点：——其实我们仅需要他的源码而已。 patch-o-matic-ngtar.bz2 #下载点：——我down的是必威体育精装版的包。 编译过程 获取安装包并解压（/root目录内） #wget /pub/patch-o-matic-ng/snapshot/patch-o-matic-ngtar.bz2 #wget /pub/iptables/iptables-1.4.0.tar.bz2 #tar xjf iptables-1.4.0.tar.bz2 #tar xjf patch-o-matic-ngtar.bz2 #cd /root/patch-o-matic-ng下载connlimit模块 #./runme –download [root@connlimit patch-o-matic-ng# KERNEL_DIR=/usr/src/kernels/2.6.18-8.el5-i686/ IPTABLES_DIR=/root/iptables-1.4.0 ./runme --download Successfully downloaded external patch geoip Successfully downloaded external patch condition Successfully downloaded external patch IPMARK Successfully downloaded external patch ROUTE Successfully downloaded external patch connlimit Successfully downloaded external patch ipp2p Successfully downloaded external patch time ./patchlets/ipv4options exists and is not external ./patchlets/TARPIT exists and is not external Successfully downloaded external patch ACCOUNT Successfully downloaded external patch pknock Loading patchlet definitions......................... done Excellent! Source trees are ready for compilation. 应用connlimit补丁#KERNEL_DIR=/usr/src/kernels/2.6.18-8.el5-i686 IPTABLES_DIR=/root/iptables-1.4.0 ./runme connlimit [root@connlimit patch-o-matic-ng# KERNEL_DIR=/usr/src/kernels/2.6.18-8.el5-i686/ IPTABLES_DIR=/root/iptables-1.4.0 ./runme connlimit Loading patchlet definitions......................... done Welcome to Patch-o-matic ($Revision: 6736 $)! Kernel: 2.6.18, /usr/src/kernels/2.6.18-8.el5-i686/ Iptables: 1.4.0, /root/iptables-1.4.0 Each patch is a new feature: man