Re: ipfilter doesn't compile in 5.2-Release

Brooks Davis wrote:

> On Fri, Jan 23, 2004 at 12:13:16AM +0100, Hanspeter Roth wrote:
> 
>>Hello,
>>
>>I'm trying to configure IPFILTER in 5.2-Release. But the compilation
>>failes:
>>
>>cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  -fformat-extensions -std=c99 -nostdinc -I-  -I. -I../../.. -I../../../contrib/dev/acpica -I../../../contrib/ipfilter -I../../../contrib/dev/ath -I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm -D_KERNEL -include opt_global.h -fno-common -finline-limit=15000 -fno-strict-aliasing  -mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding -Werror ../../../contrib/ipfilter/netinet/ip_fil.c
>>../../../contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper':
>>../../../contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' undeclared (first use in this function)
>>
>>I've copied the oppropriate options from /sys/conf/NOTES.
> 
> 
> You missed the line four lines below options IPFILTER:
> 
> options 	PFIL_HOOKS		#required by IPFILTER

Can we put PFIL_HOOKS in the GENERIC kernel config, so a person doesn't have 
to recompile the kernel to use IPFilter - like it was back in later versions 
of 4.x?

It seems kind of silly to have the default 5.x install come with a ipfilter 
kld module sitting there, a knob that can be used in rc.conf to enable it - 
but it can't be used without jumping through more hoops.

	Barry