From owner-freebsd-current@FreeBSD.ORG Thu Jan 22 15:56:02 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5416616A4CE; Thu, 22 Jan 2004 15:56:02 -0800 (PST) Received: from eden.barryp.org (host-150-32-220-24.midco.net [24.220.32.150]) by mx1.FreeBSD.org (Postfix) with ESMTP id C354A43D1D; Thu, 22 Jan 2004 15:56:00 -0800 (PST) (envelope-from bp@barryp.org) Received: from geo.med.und.nodak.edu ([134.129.166.11] helo=barryp.org) by eden.barryp.org with asmtp (TLSv1:AES256-SHA:256) (Exim 4.20) id 1Ajog1-0001r1-UR; Thu, 22 Jan 2004 17:55:58 -0600 Message-ID: <401062E9.7020407@barryp.org> Date: Thu, 22 Jan 2004 17:55:21 -0600 From: Barry Pederson User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-stable@freebsd.org, freebsd-current@freebsd.org References: <20040122231316.GA75352@gicco.homeip.net> <20040122232028.GA5845@Odin.AC.HMC.Edu> In-Reply-To: <20040122232028.GA5845@Odin.AC.HMC.Edu> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on eden.barryp.org X-Spam-Status: No, hits=-4.9 required=4.5 tests=BAYES_00 autolearn=ham version=2.61 Subject: Re: ipfilter doesn't compile in 5.2-Release X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Jan 2004 23:56:02 -0000 Brooks Davis wrote: > On Fri, Jan 23, 2004 at 12:13:16AM +0100, Hanspeter Roth wrote: > >>Hello, >> >>I'm trying to configure IPFILTER in 5.2-Release. But the compilation >>failes: >> >>cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99 -nostdinc -I- -I. -I../../.. -I../../../contrib/dev/acpica -I../../../contrib/ipfilter -I../../../contrib/dev/ath -I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm -D_KERNEL -include opt_global.h -fno-common -finline-limit=15000 -fno-strict-aliasing -mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding -Werror ../../../contrib/ipfilter/netinet/ip_fil.c >>../../../contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper': >>../../../contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' undeclared (first use in this function) >> >>I've copied the oppropriate options from /sys/conf/NOTES. > > > You missed the line four lines below options IPFILTER: > > options PFIL_HOOKS #required by IPFILTER Can we put PFIL_HOOKS in the GENERIC kernel config, so a person doesn't have to recompile the kernel to use IPFilter - like it was back in later versions of 4.x? It seems kind of silly to have the default 5.x install come with a ipfilter kld module sitting there, a knob that can be used in rc.conf to enable it - but it can't be used without jumping through more hoops. Barry