pppd is not accepting active filters!!!!

Hi all again.

I know this might get bothering but I have no place else to turn

I tried out many configs to work around the problem with pppd in FC2.

The problem:

If you use active-filter inbound/outbound then you get the error
Jun 2 22:18:37 gw pppd[11834]: error in active-filter expression:
inbound/outbound not supported on linktype 0

I tried to triky the system by using active-filter src net
<my-ppp0-net-number> but it keeps on giving syntax-error!

HELP!

Yes I did try to recompile pppd-2.4.2 but the new binary gives the same
error (this results gives me the feeling that it is not a problem of the
pppd-2.4.2 shipped - it has to do with the system/libraries itself)

Yes I did try to recompile pppd-2.4.1 but it will not compile if you set
FILTER=y to the Makefile because it crashes with:

gcc -Wall -D_linux_=1 -DHAVE_PATHS_H -DIPX_CHANGE -DHAVE_MULTILINK -DHAVE_M
MAP -I../include -DCHAPMS=1 -DUSE_CRYPT=1 -DHAVE_CRYPT_H=1 -DHAS_SHADOW -DUS
E_PAM -DPLUGIN -DPPP_FILTER -I/usr/include/pcap -c -o demand.o demand.c
demand.c:37:21: net/bpf.h: No such file or directory
make[1]: *** [demand.o] Error 1
make[1]: Leaving directory `/usr/src/redhat/SRPMS/ppp-2.4.1/ppp-2.4.1/pppd'
make: *** [all] Error 2

(pppd 2.4.2 has a patch on that )

Questions:
Why is this happening?
What makes a link to be type 0 and not something else?
What is this type and what does it mean?
How do I change the type to a type that works (and what type???)

Do I have to change back to FC1??? (PLEASE NO

Cliford Kite had an idea that something might have changed in FC2 and
libcap.a!

If I knew more on programming I would look myself on the problem but
compilation is where my knowledge stops (but working on it .

Really thank you all for your time.
Theo

Theophanis Kontogiannis <(E-Mail Removed)> wrote:

> I tried out many configs to work around the problem with pppd in FC2.

> The problem:

> If you use active-filter inbound/outbound then you get the error
> Jun 2 22:18:37 gw pppd[11834]: error in active-filter expression:
> inbound/outbound not supported on linktype 0

This is the error my tcpdump gives for outbound:

tcpdump -i ppp0 outbound
tcpdump: inbound/outbound not supported on linktype 113

No, I don't know what linktype 113 means.

> I tried to triky the system by using active-filter src net
> <my-ppp0-net-number> but it keeps on giving syntax-error!

The pppd active-filter arguments may always have to be enclosed in
single quotes.

I don't know what "<my-ppp0-net-number>" means.

> HELP!

> Yes I did try to recompile pppd-2.4.2 but the new binary gives the same
> error (this results gives me the feeling that it is not a problem of the
> pppd-2.4.2 shipped - it has to do with the system/libraries itself)

> Yes I did try to recompile pppd-2.4.1 but it will not compile if you set
> FILTER=y to the Makefile because it crashes with:

> gcc -Wall -D_linux_=1 -DHAVE_PATHS_H -DIPX_CHANGE -DHAVE_MULTILINK -DHAVE_M
> MAP -I../include -DCHAPMS=1 -DUSE_CRYPT=1 -DHAVE_CRYPT_H=1 -DHAS_SHADOW -DUS
> E_PAM -DPLUGIN -DPPP_FILTER -I/usr/include/pcap -c -o demand.o demand.c
> demand.c:37:21: net/bpf.h: No such file or directory

You need the include file

-rw-r--r-- 1 root root 13586 Oct 21 2002 /usr/include/net/bpf.h

If you can't find one and the email address in your header is valid then
I'll email you a copy of mine. Just ask. When you get the file then
you can try again and see what happens.

> make[1]: *** [demand.o] Error 1
> make[1]: Leaving directory `/usr/src/redhat/SRPMS/ppp-2.4.1/ppp-2.4.1/pppd'
> make: *** [all] Error 2

> (pppd 2.4.2 has a patch on that )

> Questions:
> Why is this happening?

You don't have the include file above to compile the standard pppd.
Also your kernel may not be compiled to support filtering. Check
kernel for support by changing to the top of the kernel source tree
and following this recipe:

make menuconfig
Device Drivers --->
Networking support --->[*] PPP filtering

Other things could be wrong but until they show up there's nothing else
I can add, except that lack of kernel support is beginning to look like
the cause. That conclusion is based on your recompiled 2.4.2 binary,
which I assumed used the "patch" gives the same error. But I don't see
how a patch could allow you to recompile 2.4.2 with the filter options
unless it provided bpf.h or whatever pppd needs from that file.

> What makes a link to be type 0 and not something else?

Beats me, unless it's type designation for a point to point link.

> What is this type and what does it mean?

This is what man tcpdump says about it (assuming that "null" means
linktype 0):

dir qualifiers specify a particular transfer
direction to and/or from id. Possible
directions are src, dst, src or dst and src
and dst. E.g., `src foo', `dst net 128.3',
`src or dst port ftp-data'. If there is no
dir qualifier, src or dst is assumed. For
`null' link layers (i.e. point to point pro-
tocols such as slip) the inbound and out-
bound qualifiers can be used to specify a
desired direction.


> How do I change the type to a type that works (and what type???)

AFAIK, you don't need a change.

> Do I have to change back to FC1??? (PLEASE NO

I think that depends on whether or not you stick with this until you
find a solution.

--
Clifford Kite Email: "echo xvgr_yvahk-(E-Mail Removed)|rot13"
PPP-Q&A links, downloads: http://ckite.no-ip.net/
/* For every credibility gap, there is a gullibility fill.
-- R. Clopton */

Dear Clifford,

Yes my kernel has support for ppp_filtering.
I do not know what really is going on.
would you be kind enough to e-mail me the file needed (bpf.h)
(E-Mail Removed)

Sincerely,
Theophanis



Would you be kind enough to e-mail the
"Clifford Kite" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Theophanis Kontogiannis <(E-Mail Removed)> wrote:
>
> > I tried out many configs to work around the problem with pppd in FC2.
>
> > The problem:
>
> > If you use active-filter inbound/outbound then you get the error
> > Jun 2 22:18:37 gw pppd[11834]: error in active-filter expression:
> > inbound/outbound not supported on linktype 0
>
> This is the error my tcpdump gives for outbound:
>
> tcpdump -i ppp0 outbound
> tcpdump: inbound/outbound not supported on linktype 113
>
> No, I don't know what linktype 113 means.
>
> > I tried to triky the system by using active-filter src net
> > <my-ppp0-net-number> but it keeps on giving syntax-error!
>
> The pppd active-filter arguments may always have to be enclosed in
> single quotes.
>
> I don't know what "<my-ppp0-net-number>" means.
>
> > HELP!
>
> > Yes I did try to recompile pppd-2.4.2 but the new binary gives the same
> > error (this results gives me the feeling that it is not a problem of the
> > pppd-2.4.2 shipped - it has to do with the system/libraries itself)
>
> > Yes I did try to recompile pppd-2.4.1 but it will not compile if you set
> > FILTER=y to the Makefile because it crashes with:
>
> >
gcc -Wall -D_linux_=1 -DHAVE_PATHS_H -DIPX_CHANGE -DHAVE_MULTILINK -DHAVE_M
> >
MAP -I../include -DCHAPMS=1 -DUSE_CRYPT=1 -DHAVE_CRYPT_H=1 -DHAS_SHADOW -DUS
> > E_PAM -DPLUGIN -DPPP_FILTER -I/usr/include/pcap -c -o demand.o
demand.c
> > demand.c:37:21: net/bpf.h: No such file or directory
>
> You need the include file
>
> -rw-r--r-- 1 root root 13586 Oct 21 2002 /usr/include/net/bpf.h
>
> If you can't find one and the email address in your header is valid then
> I'll email you a copy of mine. Just ask. When you get the file then
> you can try again and see what happens.
>
> > make[1]: *** [demand.o] Error 1
> > make[1]: Leaving directory
`/usr/src/redhat/SRPMS/ppp-2.4.1/ppp-2.4.1/pppd'
> > make: *** [all] Error 2
>
> > (pppd 2.4.2 has a patch on that )
>
> > Questions:
> > Why is this happening?
>
> You don't have the include file above to compile the standard pppd.
> Also your kernel may not be compiled to support filtering. Check
> kernel for support by changing to the top of the kernel source tree
> and following this recipe:
>
> make menuconfig
> Device Drivers --->
> Networking support --->
>[*] PPP filtering
>
> Other things could be wrong but until they show up there's nothing else
> I can add, except that lack of kernel support is beginning to look like
> the cause. That conclusion is based on your recompiled 2.4.2 binary,
> which I assumed used the "patch" gives the same error. But I don't see
> how a patch could allow you to recompile 2.4.2 with the filter options
> unless it provided bpf.h or whatever pppd needs from that file.
>
> > What makes a link to be type 0 and not something else?
>
> Beats me, unless it's type designation for a point to point link.
>
> > What is this type and what does it mean?
>
> This is what man tcpdump says about it (assuming that "null" means
> linktype 0):
>
> dir qualifiers specify a particular transfer
> direction to and/or from id. Possible
> directions are src, dst, src or dst and src
> and dst. E.g., `src foo', `dst net 128.3',
> `src or dst port ftp-data'. If there is no
> dir qualifier, src or dst is assumed. For
> `null' link layers (i.e. point to point pro-
> tocols such as slip) the inbound and out-
> bound qualifiers can be used to specify a
> desired direction.
>
>
> > How do I change the type to a type that works (and what type???)
>
> AFAIK, you don't need a change.
>
> > Do I have to change back to FC1??? (PLEASE NO
>
> I think that depends on whether or not you stick with this until you
> find a solution.
>
> --
> Clifford Kite Email: "echo xvgr_yvahk-(E-Mail Removed)|rot13"
> PPP-Q&A links, downloads: http://ckite.no-ip.net/
> /* For every credibility gap, there is a gullibility fill.
> -- R. Clopton */