summaryrefslogtreecommitdiffstats
path: root/INSTALL
diff options
context:
space:
mode:
authorHarald Welte <laforge@gnumonks.org>2001-08-06 18:50:21 +0000
committerHarald Welte <laforge@gnumonks.org>2001-08-06 18:50:21 +0000
commit3efb6ead2e51fe1eca55bcb2b06afb4dc4b8cb7c (patch)
treed7a51c0752b5a80c8408692277f2b660ce4dfc2b /INSTALL
parent2acb25b8d54cb7430f0751dd36861499e1cd28bd (diff)
- added patch to support statically linking of iptables
- iptables-save/-restore is no longer experimental
Diffstat (limited to 'INSTALL')
-rw-r--r--INSTALL20
1 files changed, 13 insertions, 7 deletions
diff --git a/INSTALL b/INSTALL
index 738dd993..59fe5efa 100644
--- a/INSTALL
+++ b/INSTALL
@@ -17,16 +17,16 @@ That's it!
================================================================
FEELING BRAVE?
-1) If you want to try some extensions, you can do the following:
+1) The netfilter core team is maintaining a set of extensions / new
+ features which are not yet committed to the mainstream kernel tree.
+
+If you want to try some extensions, you can do the following:
% make patch-o-matic KERNEL_DIR=<<where-your-kernel-is>>
-This offers you a collection of maybe-broken maybe-cool third-part
+This offers you a collection of maybe-broken maybe-cool third-party
extensions. It will modify you kernel source (so back it up first!).
-
-2) If you want to test out `iptables-save' and `iptables-restore', you
-can use
- % make experimental
- % make install-experimental
+Most of them will require you to recompile / rebuild your kernel and
+modules.
================================================================
PROBLEMS YOU MAY ENCOUNTER:
@@ -42,6 +42,12 @@ PROBLEMS YOU MAY ENCOUNTER:
% make BINDIR=/usr/bin LIBDIR=/usr/lib MANDIR=/usr/man
# make BINDIR=/usr/bin LIBDIR=/usr/lib MANDIR=/usr/man install
+4) If you want to build a statically linked version of the iptables binary,
+ without the need for loading the plugins at runtime (e.g. for an embedded
+ device or router-on-a-disk), please use
+
+ % make NO_SHARED_LIBS=1
+
NOTE: make sure you build with at least the correct LIBDIR=
specification, otherwise iptables(8) won't know where to find the
dynamic objects.