smilenet / scholarzhang Goto Github PK

What steps will reproduce the problem?
1. Lan computer
2. wget http://www.youtube.com
--2010-03-13 18:28:05--  http://www.youtube.com/
正在解析主机 www.youtube.com... 74.125.153.138, 74.125.153.100, 
74.125.153.101, ...
正在连接 www.youtube.com|74.125.153.138|:80... 已连接。
已发出 HTTP 请求，正在等待回应... 读取文件头错误 (Connection 
reset by peer)。
重试中。


What is the expected output? What do you see instead?

i got:

Mar 13 18:28:05 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=77 ID=14247 DF PROTO=TCP 
SPT=80 DPT=56931 WINDOW=614 RES=0x00 ACK RST URGP=0
Mar 13 18:28:05 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=79 ID=14089 DF PROTO=TCP 
SPT=80 DPT=56931 WINDOW=616 RES=0x00 ACK RST URGP=0
Mar 13 18:28:05 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=64 PROTO=TCP SPT=80 
DPT=56931 WINDOW=1129 RES=0x00 RST URGP=0
Mar 13 18:28:05 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=64 PROTO=TCP SPT=80 
DPT=56931 WINDOW=15772 RES=0x00 RST URGP=0
Mar 13 18:28:06 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=11640 DF PROTO=TCP 
SPT=80 DPT=56937 WINDOW=647 RES=0x00 ACK RST URGP=0
Mar 13 18:28:06 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=64 PROTO=TCP SPT=80 
DPT=56937 WINDOW=1840 RES=0x00 RST URGP=0
Mar 13 18:28:06 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=64 PROTO=TCP SPT=80 
DPT=56937 WINDOW=26356 RES=0x00 RST URGP=0
Mar 13 18:28:06 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=11482 DF PROTO=TCP 
SPT=80 DPT=56937 WINDOW=649 RES=0x00 ACK RST URGP=0
Mar 13 18:28:06 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=11324 DF PROTO=TCP 
SPT=80 DPT=56937 WINDOW=651 RES=0x00 ACK RST URGP=0
Mar 13 18:28:06 chris kernel: gfw: IN=eth0 OUT= 
MAC=00:c0:26:27:f7:cb:00:1e:73:c3:85:95:08:00 SRC=74.125.153.138 
DST=192.168.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=64 PROTO=TCP SPT=80 
DPT=56937 WINDOW=31765 RES=0x00 RST URGP=0


What version of the product are you using? On what operating system?
iptables-1.4.6
ipset-4.2
Linux 2.6.31-gentoo-r6 #2 SMP

Please provide any additional information below.


# ipset -L
Name: YOUTUBE
Type: nethash
References: 1
Header: hashsize: 50 probes: 1 resize: 50
Members:
203.98.7.0/24
72.14.203.0/24
66.249.89.0/24
64.15.112.0/20
208.117.224.0/19
82.129.37.0/24
64.233.189.0/24
74.125.153.0/24
74.125.67.0/24
208.65.152.0/22
213.146.171.0/24

Name: GOOGLE
Type: nethash
References: 1
Header: hashsize: 150 probes: 1 resize: 50
Members:
66.249.64.0/19
8.8.4.0/24
72.14.192.0/18
8.6.48.0/21
74.125.0.0/16
64.68.80.0/21
209.85.128.0/17
8.8.8.0/24
173.194.0.0/16
4.3.2.0/24
64.68.88.0/21
66.102.0.0/20
216.239.32.0/19
64.233.160.0/19

Name: NOCLIP
Type: setlist
References: 1
Header: size: 4
Members:
GOOGLE
YOUTUBE



# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ZHANG      tcp  --  anywhere             anywhere            tcp spt:http 
flags:FIN,SYN,RST,ACK/SYN,ACK state ESTABLISHED match-set NOCLIP src 
LOG        tcp  --  anywhere             anywhere            tcp spt:http 
state ESTABLISHED gfw LOG level info prefix `gfw: ' 
DROP       udp  --  anywhere             anywhere            udp 
spt:domain state ESTABLISHED gfw 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination     



# cat /etc/resolv.conf 
nameserver 8.8.8.8
nameserver 8.8.4.4



# lsmod
Module                  Size  Used by
xt_gfw                  1900  2 
xt_ZHANG                2284  1 
compat_xtables          3668  1 xt_ZHANG
ip_set_nethash          6868  2 
ip_set_setlist          2568  1 
ipt_set                 1316  1 
ip_set                 10448  5 ip_set_nethash,ip_set_setlist,ipt_set


Router:

iptables-1.3.5
Linux version 2.6.11.12

What steps will reproduce the problem?

input:

 # iptables -A INPUT -p tcp --sport 80 --tcp-flags FIN,SYN,RST,ACK SYN,ACK -
m state --state ESTABLISHED -m set --match-set NOCLIP src -j ZHANG -m comment 
--comment "client-side connection obfuscation" 

output:

iptables: target "ZHANG" has version "libxtables.so.2", but 
"libxtables.so.4" is required.

What version of the product are you using? On what operating system?
west-chamber-0.0.1
iptables v1.4.7
ipset v4.2
OS: Fedora 10

so we could have a patch review work flow, rather than many committers.

what do you guys think?

--libexecdir=/usr/lib

使用自由门的时候蓝屏了

What steps will reproduce the problem?
lanck@lanck-desktop:~/下载/west-chamber-0.0.1$ ./autogen.sh 
Can't exec "aclocal": 没有该文件或目录 at
/usr/local/share/autoconf/Autom4te/FileUtils.pm line 325.
autoreconf: failed to run aclocal: 没有该文件或目录
lanck@lanck-desktop:~/下载/west-chamber-0.0.1$ sudo ./autogen.sh 
Can't exec "aclocal": 没有该文件或目录 at
/usr/local/share/autoconf/Autom4te/FileUtils.pm line 325.
autoreconf: failed to run aclocal: 没有该文件或目录


What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

教育网不行，设置了以后不能正常访问google。另外如何删除��
�

错误信息：

-------------------------------------------
checking for libxtables... configure: error: Package requirements (xtables
>= 1.4.3) were not met:

No package 'xtables' found
------------------------------------------- 

配置：

Ubuntu 9.04

iptables 1.4.4

${uname-a} = Linux rain-lao 2.6.27-16-generic #1 SMP Tue Dec 1 17:56:54 UTC
2009 i686 GNU/Linux

(猜测：xtables>=1.4.3实为iptables?)

anyway...谢谢您编写如此实用的软件

相对之前提及的一个问题，可否加入对方主机是否遵守RFC的��
�测？

现在手头有一台墙内的Linux服务器。如果我的想法可行的话，
就自己动手搞一下。

1、iptables v1.4.3.1:    ipset 4.2  system  2.6.30.10-105.2.23.fc11.i586 
2、# iptables -A INPUT -p tcp --sport 80 --tcp-flags FIN,SYN,RST,ACK
SYN,ACK -m state --state ESTABLISHED -m set --match-set NOCLIP  src -j
ZHANG -m comment --comment "client-side connection obfuscation"
3、问题：iptables v1.4.3.1: unknown option `--match-set'
Try `iptables -h' or 'iptables --help' for more information.

What steps will reproduce the problem?
1. Windows 7 32 bit / 教育网接入
2. 访问 www.youtube.com www.blogger.com groups.google.com

What is the expected output? What do you see instead?

显示被重置

What version of the product are you using? On what operating system?

0.01alpha

Please provide any additional information below.

[deleted issue]

重启后蓝屏了，删掉恢复正常。

What steps will reproduce the problem?
# iptables -A INPUT -p tcp --sport 80 --tcp-flags FIN,SYN,RST,ACK SYN,ACK
-m state --state ESTABLISHED -m set --match-set NOCLIP src -j ZHANG


What do you see?
iptables v1.4.6: Couldn't load target
`ZHANG':/usr/lib/iptables/libipt_ZHANG.so: cannot open shared object file:
No such file or directory


What version of the product are you using? On what operating system?
svn r37

Please provide any additional information below.
After `make`, at $SVN_ROOT/west-chamber:
% find . | grep ZHANG       
./extensions/xt_ZHANG.c
./extensions/xt_ZHANG.o
./extensions/libxt_ZHANG.c
./extensions/xt_ZHANG.ko
./extensions/xt_ZHANG.Kconfig
./extensions/.libxt_ZHANG.oo.d
./extensions/xt_ZHANG.mod.c
./extensions/libxt_ZHANG.so
./extensions/.svn/text-base/xt_ZHANG.Kconfig.svn-base
./extensions/.svn/text-base/xt_ZHANG.c.svn-base
./extensions/.svn/text-base/libxt_ZHANG.c.svn-base
./extensions/.svn/text-base/libxt_ZHANG.man.svn-base
./extensions/.xt_ZHANG.o.cmd
./extensions/.xt_ZHANG.ko.cmd
./extensions/xt_ZHANG.mod.o
./extensions/.tmp_versions/xt_ZHANG.mod
./extensions/libxt_ZHANG.oo
./extensions/.xt_ZHANG.mod.o.cmd
./extensions/libxt_ZHANG.man

No libipt_ZHANG.so found

What steps will reproduce the problem?
1. 安装没有问题
2. 加载iptables和ipset的规则没有问题
3. dns服务器已经设置为google的了

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?
ubuntu 9.10
iptables 1.4.4
kernel 2.6.31

Please provide any additional information below.

是不是安装了xtable-addons就不需要这里面ipset的代码了？

What steps will reproduce the problem?
1. 安装正常，像wiki上添加三组ipset之后，
运行sudo iptables -A INPUT -p tcp --sport 80 --tcp-flags FIN,SYN,RST,ACK 
SYN,ACK -m state --state ESTABLISHED -m 
set --match-set NOCLIP src -j ZHANG


What is the expected output? What do you see instead?
iptables: No chain/target/match by that name.

What version of the product are you using? On what operating system?
west-chamber 0.0.1 gentoo 2.6.32.9，


Please provide any additional information below.

WindowsXP下最后一步蓝屏

按照步骤安装，到最后一步使用的时候蓝屏，安全模式下删��
�才恢复正常

west-chamber/extensions/ipset/有两个文件ipt_set.c和ipt_SET.c能否不要��
�是靠
大小写来区分，不方便移植到Windows。

昨天晚上配置好后还能用的，今天再用就不行了

不过上Google的picasa网络相册能显示出照片了，同时我在局域��
�内另一台Windows的
电脑上登录picasa则显示不出，因此我认为这个软件已经起作��
�了。
youtube、Google 
Sites还是没法登陆。我在学校内，上网是要用一个专门的软件
拨号
连到学校的服务器，另外宿舍内还用了个路由器。是不是这��
�原因导致了该软件只能
起部分作用啊？
另外我用nslookup命令查youtube的ip，看到响应请求的不是我设置
的8.8.8.8这个服务器

you don't need ZHANG when connecting to domestic websites. that is also the 
reason we 
utilize ipset to confine the effective range.

root@bt:~/west-chamber-0.0.1/examples# iptables -A INPUT -p tcp --sport 80
--tcp-flags FIN,SYN,RST,ACK SYN,ACK -m state --state ESTABLISHED -m set
--match-set NOCLIP src -j ZHANG -m comment --comment "client-side
connection obfuscation"
Segmentation fault

请教这个问题如何解决啊?

UBUNTU9.10下 sudo apt-get install xtables-addons-common 找不到软件包
自己去下的1.2.3源代码 提示：
checking for libxtables... configure: error: Package requirements (xtables
>= 1.4.3) were not met:

No package 'xtables' found

Consider adjusting the PKG_CONFIG_PATH environment variable if you
installed software in a non-standard prefix.

Alternatively, you may set the environment variables libxtables_CFLAGS
and libxtables_LIBS to avoid the need to call pkg-config.
See the pkg-config man page for more details.


另外问一下大概什么时候可以有windows版呢？

连接youtube时syslog产生如下信息：
Mar 13 20:54:04 xxx-nb kernel: [ 1857.768715] gfw: IN=wlan0 OUT= 
MAC=00:23:4e:d8:19:4a:00:1d:0f:58:51:fc:08:00 SRC=74.125.153.102 
DST=192.168.0.110 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=64 
PROTO=TCP SPT=80 DPT=51077 WINDOW=2776 RES=0x00 RST URGP=0 
Mar 13 20:54:04 xxx-nb kernel: [ 1857.966506] gfw: IN=wlan0 OUT= 
MAC=00:23:4e:d8:19:4a:00:1d:0f:58:51:fc:08:00 SRC=74.125.153.102 
DST=192.168.0.110 LEN=40 TOS=0x00 PREC=0x00 TTL=63 ID=30442 DF 
PROTO=TCP SPT=80 DPT=51077 WINDOW=409 RES=0x00 ACK RST 
URGP=0 
Mar 13 20:54:04 xxx-nb kernel: [ 1857.967080] gfw: IN=wlan0 OUT= 
MAC=00:23:4e:d8:19:4a:00:1d:0f:58:51:fc:08:00 SRC=74.125.153.102 
DST=192.168.0.110 LEN=40 TOS=0x00 PREC=0x00 TTL=63 ID=30442 DF 
PROTO=TCP SPT=80 DPT=51077 WINDOW=409 RES=0x00 ACK RST 
URGP=0 
Mar 13 20:54:04 xxx-nb kernel: [ 1857.967990] gfw: IN=wlan0 OUT= 
MAC=00:23:4e:d8:19:4a:00:1d:0f:58:51:fc:08:00 SRC=74.125.153.102 
DST=192.168.0.110 LEN=40 TOS=0x00 PREC=0x00 TTL=63 ID=30442 DF 
PROTO=TCP SPT=80 DPT=51077 WINDOW=409 RES=0x00 ACK RST 
URGP=0 

tcpdump信息如下：
21:16:28.353622 IP xxx-nb.local.48931 > ty-in-f113.1e100.net.www: tcp 0
21:16:28.933202 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 0
21:16:28.933282 IP xxx-nb.local.48931 > ty-in-f113.1e100.net.www: tcp 0
21:16:28.933492 IP xxx-nb.local.48931 > ty-in-f113.1e100.net.www: tcp 
1041
21:16:29.088496 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 0
21:16:29.089429 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 0
21:16:29.089702 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 0
21:16:29.090075 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 0
21:16:29.091382 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 0
21:16:29.103951 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 
1418
21:16:29.104004 IP xxx-nb.local.48931 > ty-in-f113.1e100.net.www: tcp 0
21:16:29.112859 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 
1418
21:16:29.112914 IP xxx-nb.local.48931 > ty-in-f113.1e100.net.www: tcp 0
21:16:29.116819 IP ty-in-f113.1e100.net.www > xxx-nb.local.48931: tcp 
148
21:16:29.116852 IP xxx-nb.local.48931 > ty-in-f113.1e100.net.www: tcp 0

页面显示信息如下：
Error 102 (net::ERR_CONNECTION_REFUSED): Unknown error.

我的系统是ubuntu9.10, kernel: 2.6.31-15-generic

How can I uninstall it? I didn't find a convenient way to do that...
BTW: I want to uninstall it because it didn't work (I'm in a campus, and 
there seemed to be something wrong with the network).

What steps will reproduce the problem?
1. make
2.
3.

What is the expected output? What do you see instead?
young001@young001-laptop:~/下载/west-chamber-0.0.1$ make
make  all-recursive
make[1]: 正在进入目录 `/home/young001/下载/west-chamber-0.0.1'
Making all in extensions
make[2]: 正在进入目录 `/home/young001/下载/west-chamber-
0.0.1/extensions'
if [ -n "/lib/modules/2.6.31-13bfsbfq1-generic/build" ]; then make -C 
/lib/modules/2.6.31-13bfsbfq1-generic/build M=/home/young001/下
载/west-chamber-0.0.1/extensions modules; fi;
make[3]: 正在进入目录 `/lib/modules/2.6.31-13bfsbfq1-generic/build'
make[3]: *** 没有规则可以创建目标“modules”。 停止。
make[3]:正在离开目录 `/lib/modules/2.6.31-13bfsbfq1-generic/build'
make[2]: *** [modules] 错误 2
make[2]:正在离开目录 `/home/young001/下载/west-chamber-
0.0.1/extensions'
make[1]: *** [all-recursive] 错误 1
make[1]:正在离开目录 `/home/young001/下载/west-chamber-0.0.1'
make: *** [all] 错误 2
young001@young001-laptop:~/下载/west-chamber-0.0.1$ 



What version of the product are you using? On what operating system?
0.01 on ubuntu 9.10

 young001@young001-laptop:~/下载/west-chamber-0.0.1$ uname -a
Linux young001-laptop 2.6.31-13bfsbfq1-generic #43-Ubuntu SMP Wed Oct 
14 15:26:14 UTC 2009 i686 GNU/Linux


Please provide any additional information below.

我管理的DNS服务器（共3台）全部运行Solaris 
10，为大约10000台计算机服务。
为了更好的服务，希望开发组将它port到Solaris

用压缩包提供的iplog.BIN 安装时无法使用
自建 iplog.bin 安装时蓝屏

What steps will reproduce the problem?
1. 安装了westchamber驱动
2. DNS用了google的8.8.8.8
3. 使用DbgView Capture Kernel

What is the expected output? What do you see instead?
DBGView没有任何输出，DNS和Zhang模块仍然无效

What version of the product are you using? On what operating system?
使用west-chamber-win-0.02，操作系统是Win7 32位

Please provide any additional information below.

win7-win0.02下youtube,twitter,robertmao连不上 bloger可以上

能否支持下通过http代理服务器翻墙不被TCP重置

When this step:
# ipset -R < YOUTUBE
FATAL: Module ip_set not found!
ipset v4.2: couldn't vertify kernel module version!

The release used is slackware 13.Please help!
Rewards.

Since this works in Linux kernel mode, and Android / Linux on cell phones
use the same / a similar kernel, is it possible to port the project to cell
phones?

当我在examples中执行：
# iptables -A INPUT -p tcp --sport 80 --tcp-flags FIN,SYN,RST,ACK SYN,ACK
-m state --state ESTABLISHED -m set --match-set NOCLIP src -j ZHANG

# iptables -A INPUT -p tcp --sport 80 -m state --state ESTABLISHED -m gfw
-j LOG --log-level info --log-prefix "gfw: "

# iptables -A INPUT -p udp --sport 53 -m state --state ESTABLISHED -m gfw
-j DROP

会出分别现下面错误：
ptables v1.4.4: Couldn't load target `ZHANG':/lib/xtables/libipt_ZHANG.so:
cannot open shared object file: No such file or directory


iptables v1.4.4: Couldn't load match `gfw':/lib/xtables/libipt_gfw.so:
cannot open shared object file: No such file or directory

iptables v1.4.4: Couldn't load match `gfw':/lib/xtables/libipt_gfw.so:
cannot open shared object file: No such file or directory

请问应该怎么解决，TX

What steps will reproduce the problem?
1. 把iplog.bin放到c盘
2. 安装了westchamber驱动
3. DNS用了google的8.8.8.8
4. 使用DbgView Capture Kernel


What is the expected output? What do you see instead?
DBGView没有任何输出
opera访问youtube，等待很长时间后连接被远程服务器关闭

What version of the product are you using? On what operating system?
win-0.02,windows 7 ultimate

Please provide any additional information below.
未开启防火墙，使用了mse杀毒软件、ad 
muncher、UAC，关闭开启此3项都不行
网络为双网卡，一块内网ip，一块外网用
外网网卡为intel-82566DM-2,连在tplink 
841n路由上，841又串在中兴的路由上，通
过中兴路由adsl拨号上网。
win7(192.168.9.123)-->tplink 841n(192.168.1.123)-->中兴adsl（192.168.1.1,拨
号上网）

西厢计划的进行，将几乎必然的可能导致 google code 
本身被封禁。从而连累大量的
google code 用户。

我的建议是改换到另外一个平台上去托管该代码。

另外，建议使用 hg 等分布式版本管理而非 
svn，因为该软件被封禁几乎是必然的，
使用分布式版本管理保证了每个人的机器上都有一个库，星��
�之火可以燎原，主站被
封可以从任何人机器上同步代码。

是个新手，刚接触CentOS不久哈
CentOS上Yum的源用的是中科大的
用Yum安装了autoconf automake libtool这三个包
然后执行了 
./autogen.sh
显示需要1.10以上版本的automake

更新了automake 1.10.1又显示autoconf版本太低
又把autoconf更新到了2.60之后还是编译不成功，有没有熟悉CentO
S的人指
点一下，google 了半天都没找到解决方法
报错如下
configure.ac:9: error: possibly undefined macro: AC_DISABLE_STATIC
      If this token and others are legitimate, please use m4_pattern_allow.
      See the Autoconf documentation.
configure.ac:10: error: possibly undefined macro: AC_PROG_LIBTOOL
autoreconf: /usr/local/bin/autoconf failed with exit status: 1

现在的版本是autoconf 2.60 automake 1.10.1 libtool 1.5.22
CentOS 5.4 kernel 2.6.18-164.11.1.el5xen

？

我执行make install 
后，再执行时提示没有/lib/xtables/libipt_ZHANG.so。这是
什么原因？原文提示如下：
{{{
iptables v1.4.4: Couldn't load target `ZHANG':/lib/xtables/libipt_ZHANG.so: 
cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
}}}
我检查了文件，确实没有这个libipt_ZHANG.so文件。不过
有/usr/libexec/xtables/libxt_ZHANG.so这个文件。在./configure的时候我�
��定
了 --prefix=/usr 。不知道这是什么问题。

我的系统是ubuntu9.10;
iptables v1.4.4;
ipset v4.2;

doesn't work but display "using ……"

西厢计划目前讨论空前热烈。

在gentoo下受益于此。

希望作者一定要注意安全。由衷地祝好。

以上。

首先要感谢牛人们的贡献，期待能尽快稳定可用
其次，建议改名，西厢太文绉绉了，还是叫红杏计划更好，��
�杏出墙！

Thanks for your project.

Now i try to uninstall
after run:
1.make clean
2../configure
3.sudo make uninstall


 ( cd '/usr/local/share/man/man8' && rm -f xtables-addons.8 )
/bin/bash: line 8: cd: /usr/local/share/man/man8: 没有该文件或目录
make[1]: *** [uninstall-man8] 错误 1
make[1]:正在离开目录 `/home/user/桌面/west-chamber-0.0.1'
make: *** [uninstall-recursive] 错误 1


What should i do now?

系统是Ubuntu，ADSL拨号上网，编译安装之后可以解析到大部分�
��确的IP，但浏览器访
问时由reset变成timeout。使用的是networkmanager拨号，ADSL 
Modem没有启用路由功
能。

iptables 1.4.4
ipset 4.2
linux 2.6.32-15-generic x86_64

What steps will reproduce the problem?
1. 将 Wikimedia 的相关 IP 加入 ipset 规则
2. 连接 zh.wikipedia.org
3. 会发现有时在可以接受的时间内无法完成加载

Google 及 Youtube 也会出现此问题，频率不定。

What is the expected output? What do you see instead?
三次握手中注入 FIN 
后即收不到服务器的回应，只能见到各种重传，附 tcpdump。

What version of the product are you using? On what operating system?
scholarzhang r40
iptables v1.4.4
ipset v4.2, protocol version 4.
Linux Jimmy 2.6.32-16-generic #24-Ubuntu SMP Sat Mar 6 12:33:21 UTC 2010
i686 GNU/Linux

Please provide any additional information below.

What steps will reproduce the problem?
1. 点击INSTALL之后选择SERVICE
2.
3.

What is the expected output? What do you see instead?
提示在WOW64下不允许操作.

What version of the product are you using? On what operating system?
win7 en 64 ultimate

Please provide any additional information below.

这个版本哪里有下载。。我这里只有1.22的，再也找不到高版�
��。

请求各位大神移植到windows64位环境
本人Windows 7 X64环境，愿意做测试志愿者并及时反馈
感谢各位

What steps will reproduce the problem?
1. svn co the source
2. run autogen.sh
3.

What is the expected output? What do you see instead?
autogen.sh returns good.


What version of the product are you using? On what operating system?
rawhide

Please provide any additional information below.
add a empty dir "m4" will be ok.