Re: ipfw kernel module not being built

On Fri, Aug 11, 2017 at 03:14:39PM -0700, Ngie Cooper wrote:
> 
> > On Aug 11, 2017, at 12:34, Bob Willcox <bob_at_immure.com> wrote:
> > 
> >> On Fri, Aug 11, 2017 at 12:21:49PM -0700, Mark Johnston wrote:
> >> On Fri, Aug 11, 2017 at 02:06:02PM -0500, Bob Willcox wrote:
> >>>>> On Aug 11, 2017, at 10:36, Bob Willcox <bob_at_immure.com> wrote:
> >>>>> 
> >>>>> When I rebuild my kernel on Jun 13th none of the previous ipfw kernel modules were built:
> >>>>> 
> >>>>> ipfw.ko
> >>>>> ipfw_nat.ko
> >>>>> ipfw_nat64.ko
> >>>>> ipfw_nptv6.ko
> >>>>> ng_ipfw.ko
> >>>>> 
> >>>>> and only this ipfw module was built:
> >>>>> 
> >>>>> ng_ipfw.ko
> >>>>> 
> >>>>> However, the verson of /etc/rc.d/ipfw that I'm running (from the
> >>>>> freebsd-base-graphics branch) is failing to load ipfw so my firewall isn't
> >>>>> starting.
> >>>>> 
> >>>>> So, what am I missing? Is it possible that the freebsd-base-graphics branch
> >>>>> that I'm running has an old or improper version of /etc/rc.d/ipfw?
> >> 
> >> [...]
> >> 
> >>> include GENERIC_DRM
> >> 
> >> GENERIC_DRM sets MODULES_OVERRIDE, so only the specified modules are
> >> built. In particular, ipfw*.ko does not get built. You'll need to either
> >> remove the MODULES_OVERRIDE setting in GENERIC_DRM (which will make
> >> kernel builds somewhat slower), or add
> >> 
> >> makeoptions    MODULES_OVERRIDE+= ipfw ...
> >> 
> >> to your custom config.
> 
> Or add "MODULES_OVERRIDE+= ipfw..." to your src.conf.
> Cheers,
> -Ngie

Well, I added the 'makeoptions MODULES_OVERRIDE+= ipfw' to my kernel config
and rebuilt my kernel and it did build ipfw.ko as expected. I haven't
installed this new kernel yet since I am not at a good point here at work to
do that right now...but will when I get a chance.

Thanks all for the help.

-- 
Bob Willcox    | Lawsuit, n.: A machine which you go into as a pig and
bob_at_immure.com |    come out as a sausage.
Austin, TX     |    -- Ambrose Bierce