This file will help you compile, install and validate the Simple Packet Signing implementation for Linux. Compiling --------- Make sure that your iptables directory has been compiled and contains binaries and include headers. We search the binary for the right location of our iptables userspace modules. You can find iptables on http://netfilter.samba.org Also have the kernel includes of your currently running kernel available. RedHat and other distributions have packages containing the includes. Otherwise, just grab a kernel from ftp..kernel.org To compile, we need to know: Where your kernel source is Where we can find iptables headers Most of the time, the install script can't figure this out itself, and sometimes it guesses wrong. But you can always just run ./configure and see what happens. Be careful that you point to the sources of iptables that correspond to the iptables you are actually using in production! See ./configure --help for information on how to configure. Additionally we need to know: What version of iptables we are building against Where we can put our iptables user space modules These are normally derived from the first two parameters. If ./configure is satisfied, run make and then as root make install VALIDATING YOUR INSTALL ----------------------- userspace: Check if installation succeded by running, as root: # iptables -j SIGN --help The last few lines should now contain help information about signing packets. More information is in README kernel: # iptables -L # depmod -a # insmod ipt_SIGN # insmod ipt_STRIPSPS This should all proceed without errors. Now continue reading in README