From owner-freebsd-questions@FreeBSD.ORG Wed Aug 11 09:59:35 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 93F6A106566C for ; Wed, 11 Aug 2010 09:59:35 +0000 (UTC) (envelope-from cameron@cskk.homeip.net) Received: from harvey.boardofstudies.nsw.edu.au (mail2.rack1.boardofstudies.nsw.edu.au [202.125.174.133]) by mx1.freebsd.org (Postfix) with ESMTP id 570C98FC1C for ; Wed, 11 Aug 2010 09:59:34 +0000 (UTC) Received: from cskk.homeip.net (localhost.localdomain [127.0.0.1]) by harvey.boardofstudies.nsw.edu.au (Postfix) with ESMTP id 7F1A74D3223; Wed, 11 Aug 2010 19:59:33 +1000 (EST) Received: by janus.cskk.homeip.net (Postfix, from userid 1000) id 684F210040AE0; Wed, 11 Aug 2010 19:59:33 +1000 (EST) Date: Wed, 11 Aug 2010 19:59:33 +1000 From: Cameron Simpson To: Rob Farmer Message-ID: <20100811095933.GA23627@cskk.homeip.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20100811093019.GA18702@cskk.homeip.net> User-Agent: Mutt/1.5.20 (2009-06-14) References: <20100811093019.GA18702@cskk.homeip.net> Cc: freebsd-questions@freebsd.org Subject: Re: trouble building FreeBSD 8.1 amd64 kernel with pfsync support X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Aug 2010 09:59:35 -0000 On 11Aug2010 19:30, I wrote: | On 11Aug2010 01:36, Rob Farmer wrote: | | On Wed, Aug 11, 2010 at 12:20 AM, Cameron Simpson wrote: | | > I'm trying to build a kernel for a pair of firewalls which will be using | | > CARP and pfsync for redundancy. Since I'm new to FreeBSD the config is | | > based on the GENERIC config, thus: | | >  include GENERIC | | >  ident NEW_FIREWALL | | >  device carp | | >  ##device pfsync [...] | | > If I uncomment the "devic pfsync" the build aborts at link time ending thus: | | | | Do you also have a "device pf" line? I think that is a prereq for | | pfsync. You may also need "device pflog" - I'm not sure because I've | | always just added them all. | | Hmm. [greps GENERIC...] No, I don't. I figured that since pfctl was | working I was ok there, but I think it loads the module dynamicly. I can see | that if pfsync needs a static build it may rely on pf and pflog being static | also. I'll try that now and report. Victory! Thanks! I'm a little surprised that the error I got: in_proto.o(.data+0x698): undefined reference to `pfsync_input' seemed to be a complaint about pfsync rather than missing pf stuff. Cheers, -- Cameron Simpson DoD#743 http://www.cskk.ezoshosting.com/cs/ Tis better to have test ridden and lost, than to never have test ridden at all.