Network Foundation: Analysis and application of Iptables and Layer 7 protocol

The introduction to IPTABBLES+L7 is divided into two parts:

The first part —————— to the system upgrade L7 patch

The second part —————— the application of IPTABLES+L7

The first part: the system upgrades patching

In order to use the L7 layer protocol for control, we need to patch files in the kernel, the kernel file needs to be recompiled, each of the following steps need to be cautious, or to start again ~ need software friends can Q395061796

Software Requirements:

1. Disassemble kernel files and Layer7 files:

[ROOT@ZHANGC ~]# tar jxvf linux-2.6.25.19.tar.bz2-c/usr/src/

[ROOT@ZHANGC ~]# tar zxvf netfilter-layer7-v2.20.tar.gz-c/usr/src/

2, put the patch file into the kernel folder

[ROOT@ZHANGC ~]# cd/usr/src/linux-2.6.25.19/

[ROOT@ZHANGC linux-2.6.25.19]# Patch-p1 < /usr/src/netfilter-layer7-v2.20/kernel-2.6.25-layer7-2.20.patch

3, the use of kernel files to configure a new kernel

[ROOT@ZHANGC linux-2.6.25.19]# cp/boot/config-2.6.18-164.el5. config

[ROOT@ZHANGC linux-2.6.25.19] #make menuconfig

Select m for some of the required service options and compile as a module.

The first part of the option:

Compile the following 3 modules

Part Two options:

Compile the following 4 modules