libxt_SYNSANITY.c:18:41: fatal error: linux/netfilter/xt_SYNPROXY.h

[centminmod]

on CentOS 7.2 64bit at make -C iptext install stage getting

make: Entering directory `/svr-setup/synsanity/iptext'
ccache gcc -o libxt_SYNSANITY.so libxt_SYNSANITY.c -I/usr/src/linux-headers-3.10.0-327.22.2.el7.x86_64/include/uapi -I/usr/src/linux-headers-3.10.0-327.22.2.el7.x86_64/include -DPIC -fPIC -Wno-cpp -lxtables -shared
libxt_SYNSANITY.c:18:41: fatal error: linux/netfilter/xt_SYNPROXY.h: No such file or directory
 #include <linux/netfilter/xt_SYNPROXY.h>
                                     ^
compilation terminated.
make: *** [libxt_SYNSANITY.so] Error 1
make: Leaving directory `/svr-setup/synsanity/iptext'

location of xt_SYNPROXY.h

locate xt_SYNPROXY.h | grep $(uname -r)
/usr/src/kernels/3.10.0-327.22.2.el7.x86_64/include/uapi/linux/netfilter/xt_SYNPROXY.h

modules

locate /lib/modules/3.10.0-327.22.2.el7.x86_64/extra/
/usr/lib/modules/3.10.0-327.22.2.el7.x86_64/extra/ipt_SYNSANITY.ko
/usr/lib/modules/3.10.0-327.22.2.el7.x86_64/extra/xt_condition.ko
/usr/lib/modules/3.10.0-327.22.2.el7.x86_64/extra/xt_syncookies.ko

and dkms build output

dkms build .

Creating symlink /var/lib/dkms/synsanity/0.1.2/source ->
                 /usr/src/synsanity-0.1.2

DKMS: add completed.

Kernel preparation unnecessary for this kernel.  Skipping...

Building module:
cleaning build area...(bad exit status: 2)
make -j4 KERNELRELEASE=3.10.0-327.22.2.el7.x86_64 -C kmod/ KDIR=/lib/modules/3.10.0-327.22.2.el7.x86_64/build...
cleaning build area...(bad exit status: 2)

DKMS: build completed.

dkms install output

dkms install synsanity/0.1.2

ipt_SYNSANITY:
Running module version sanity check.
 - Original module
   - No original module exists within this kernel
 - Installation
   - Installing to /lib/modules/3.10.0-327.22.2.el7.x86_64/extra/

xt_syncookies.ko:
Running module version sanity check.
 - Original module
   - No original module exists within this kernel
 - Installation
   - Installing to /lib/modules/3.10.0-327.22.2.el7.x86_64/extra/

xt_condition.ko:
Running module version sanity check.
 - Original module
   - No original module exists within this kernel
 - Installation
   - Installing to /lib/modules/3.10.0-327.22.2.el7.x86_64/extra/
Adding any weak-modules

depmod...

DKMS: install completed.

[totoCZ]

Hi,

we had this problem just now while we're testing this module

you need to copy https://github.com/torvalds/linux/blob/master/include/uapi/linux/netfilter/xt_SYNPROXY.h to /usr/include/linux/netfilter/

http://comments.gmane.org/gmane.comp.security.firewalls.netfilter.devel/63681 is the upstream fix.

Tom Hetmer, CDN77