From owner-freebsd-net@FreeBSD.ORG Mon Jan 7 11:14:38 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 674B916A47C for ; Mon, 7 Jan 2008 11:14:38 +0000 (UTC) (envelope-from vanhu@zeninc.net) Received: from smtp.zeninc.net (reverse-25.fdn.fr [80.67.176.25]) by mx1.freebsd.org (Postfix) with ESMTP id 2B5E013C465 for ; Mon, 7 Jan 2008 11:14:38 +0000 (UTC) (envelope-from vanhu@zeninc.net) Received: by smtp.zeninc.net (smtpd, from userid 1000) id 313A73F6F; Mon, 7 Jan 2008 11:41:29 +0100 (CET) Date: Mon, 7 Jan 2008 11:41:29 +0100 From: VANHULLEBUS Yvan To: freebsd-net@freebsd.org Message-ID: <20080107104128.GA23718@zen.inc> References: <5a1835cd0801051355tc14f06bja72d8659bd499861@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <5a1835cd0801051355tc14f06bja72d8659bd499861@mail.gmail.com> User-Agent: All mail clients suck. This one just sucks less. Subject: Re: ipsec_tools will not compile after IPSEC_NAT_T patch X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2008 11:14:38 -0000 On Sat, Jan 05, 2008 at 04:55:21PM -0500, Lyle Scott III wrote: > I applied the IPSEC_NAT_T patch from > http://vanhu.free.fr/FreeBSD/patch-natt-freebsd6-2007-05-31.diff to FreeBSD > 6.2-release-p9 > yesterday to include IPSEC_NAT_T support. > i did a make buildworld buildkernel && make installworld installkernel && > shutdown -r now Hi. To answer your previous mail, you'll need to add IPSEC_NAT_T option to your configuration file, or kernel will be compiled without NAT-T support. > Now when i recompile /usr/ports/security/ipsec-tools it passes the test for > checking if the nat_t patch is installed but the port fails in make. I did > some research and noticed the same function it errors at is in the patch. Do you have the configure's output for this test ? > Did i mess something up or what? I'm not sure where to go from here. > Should i just delete /usr/src/* and extract a new src and start over? > > cc -DHAVE_CONFIG_H -I. -I../.. -I./../libipsec > -I./../../src/racoon/missing -D_GNU_SOURCE > -DSYSCONFDIR=\"/usr/local/etc/racoon\" -DADMINPORTDIR=\"/var/db/racoon\" > -pipe -g -Wall -Werror -Wno-unused -MT isakmp.o -MD -MP -MF > .deps/isakmp.Tpo -c -o isakmp.o isakmp.c > isakmp.c: In function `isakmp_open': > isakmp.c:1750: error: `UDP_ENCAP_ESPINUDP' undeclared (first use in this > function) > isakmp.c:1750: error: (Each undeclared identifier is reported only once > isakmp.c:1750: error: for each function it appears in.) > isakmp.c:1753: error: `UDP_ENCAP_ESPINUDP_NON_IKE' undeclared (first use in > this function) > isakmp.c:1757: error: `UDP_ENCAP' undeclared (first use in this function) > *** Error code 1 Those defines are in netinet/udp.h Please check if they are in your /usr/include/netinet/udp.h If you find them there, that means your problem comes from your shell's environment (check SYSDIR, etc...). If you don't find those defines in /usr/include/netinet/udp.h, check in /usr/src/sys/netinet/udp.h If you find them, that means you had a problem while installing world, if you didn't find them, that means you had a problem while applying the patch. Yvan. -- NETASQ http://www.netasq.com