Blog dot vslinux dot net

change this files:

net/netfilter/Kconfig
line ~951

config NETFILTER_XT_MATCH_LAYER7
tristate ‘”layer7″ match support’
depends on NETFILTER_XTABLES
depends on EXPERIMENTAL && (IP_NF_CONNTRACK || NF_CONNTRACK)
depends on NF_CT_ACCT

to

config NETFILTER_XT_MATCH_LAYER7
tristate ‘”layer7″ match support’
default m
depends on NETFILTER_XTABLES
depends on EXPERIMENTAL && (IP_NF_CONNTRACK || NF_CONNTRACK)
# depends on NF_CT_ACCT

net/netfilter/xt_layer7.c
line ~416
find
#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 28)
match(const struct sk_buff *skbin, const struct xt_match_param *par)

and replace with

#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)
match(const struct sk_buff *skbin, const struct xt_action_param *par)
#elif LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 28)
match(const struct sk_buff *skbin, const struct xt_match_param *par)

but seams that don’t work

ex:
iptables -I FORWARD -p tcp -m layer7 –l7proto bittorrent -j DROP
iptables: Input/output error.

if anyone known more about it, send-me a comment please

vasco Android