Using ipfw in current branch

From: jason dictos <jason_at_dictos.com>
Date: Sun, 19 Oct 2003 10:47:48 -0700
Hello again,

    Please disregard the email below, I realized I wasn't using that kernconf 
file. So I re-added the following lines to the latest GENRIC kernconf file:
 
# JD
options         IPFILTER                # ipfilter or something
options         IPDIVERT                # enable nat
options         IPFILTER_LOG            # something else too
options         IPFILTER_DEFAULT_BLOCK  # Block all packets by default

# JD Sound
device          pcm

And I also uncommented the following since I have a dual proc:

# To make an SMP kernel, the next two are needed
options         SMP                     # Symmetric MultiProcessor Kernel
options         APIC_IO                 # Symmetric (APIC) I

Now when I compile the kernel using make buildkernel KERNCONF=AHAB I get the 
following error:

cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs 
-Wstrict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline 
-Wcast-qual  -fformat-extensions -std=c99 -g -nostdinc -I-  -I. 
-I/usr/src/sys -I/usr/src/sys/contrib/dev/acpica 
-I/usr/src/sys/contrib/ipfilter -I/usr/src/sys/contrib/dev/ath 
-I/usr/src/sys/contrib/dev/ath/freebsd -D_KERNEL -include opt_global.h 
-fno-common -finline-limit=15000 -fno-strict-aliasing  
-mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding -Werror  
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: In function 
`fr_check_wrapper':
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' 
undeclared (first use in this function)
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:319: error: (Each undeclared 
identifier is reported only once
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:319: error: for each function 
it appears in.)
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: In function 
`fr_check_wrapper6':
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:329: error: `PFIL_OUT' 
undeclared (first use in this function)
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: In function `iplattach':
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:376: warning: unused variable 
`ph_inet'
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:378: warning: unused variable 
`ph_inet6'
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: At top level:
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:317: warning: 
`fr_check_wrapper' defined but not used
/usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:327: warning: 
`fr_check_wrapper6' defined but not used
*** Error code 1

Stop in /usr/obj/usr/src/sys/AHAB.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Ideas?
Here is the updated kernconf link:
http://www.dictos.com/AHAB

Thanks,
-Jason

> Hi All,
> 
> Here is what I get when I attempt to use any ipfilter type operations:
> 
> jason_at_ahab:/home/jason# ipfw flush
> Are you sure? [yn] y
> 
> ipfw: setsockopt(IP_FW_FLUSH): Protocol not available
> jason_at_ahab:/home/jason#
> 
> Has the kernel configuration paramaters changed since the official cut of > 
5.1? 
> Before the upgrade i could use ipfw.
> 
> Here is a link to my kernconf file:
> http://www.dictos.com/JASONKERN
> 
> Thanks,
> -Jason
Received on Sun Oct 19 2003 - 20:48:51 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:25 UTC