From owner-freebsd-current@FreeBSD.ORG Sun Oct 19 22:48:51 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A81E016A4B3 for ; Sun, 19 Oct 2003 22:48:51 -0700 (PDT) Received: from ahab.dictos.com (adsl-67-125-129-106.dsl.frsn02.pacbell.net [67.125.129.106]) by mx1.FreeBSD.org (Postfix) with ESMTP id AF3F843F93 for ; Sun, 19 Oct 2003 22:48:43 -0700 (PDT) (envelope-from jason@ahab.dictos.com) Received: from ahab.dictos.com (localhost.dictos.com [127.0.0.1]) by ahab.dictos.com (8.12.10/8.12.9) with ESMTP id h9JHlu4P056799 (version=TLSv1/SSLv3 cipher=DHE-DSS-AES256-SHA bits=256 verify=NO) for ; Sun, 19 Oct 2003 10:47:56 -0700 (PDT) (envelope-from jason@ahab.dictos.com) Received: from localhost (localhost [[UNIX: localhost]]) by ahab.dictos.com (8.12.10/8.12.9/Submit) id h9JHlmDQ056798 for freebsd-current@freebsd.org; Sun, 19 Oct 2003 10:47:48 -0700 (PDT) (envelope-from jason) From: jason dictos To: freebsd-current@freebsd.org Date: Sun, 19 Oct 2003 10:47:48 -0700 User-Agent: KMail/1.5.2 MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200310191047.48441.jason@dictos.com> Subject: Using ipfw in current branch X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: jason@dictos.com List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Oct 2003 05:48:51 -0000 Hello again, Please disregard the email below, I realized I wasn't using that kernconf file. So I re-added the following lines to the latest GENRIC kernconf file: # JD options IPFILTER # ipfilter or something options IPDIVERT # enable nat options IPFILTER_LOG # something else too options IPFILTER_DEFAULT_BLOCK # Block all packets by default # JD Sound device pcm And I also uncommented the following since I have a dual proc: # To make an SMP kernel, the next two are needed options SMP # Symmetric MultiProcessor Kernel options APIC_IO # Symmetric (APIC) I Now when I compile the kernel using make buildkernel KERNCONF=AHAB I get the following error: cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99 -g -nostdinc -I- -I. -I/usr/src/sys -I/usr/src/sys/contrib/dev/acpica -I/usr/src/sys/contrib/ipfilter -I/usr/src/sys/contrib/dev/ath -I/usr/src/sys/contrib/dev/ath/freebsd -D_KERNEL -include opt_global.h -fno-common -finline-limit=15000 -fno-strict-aliasing -mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding -Werror /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper': /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' undeclared (first use in this function) /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:319: error: (Each undeclared identifier is reported only once /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:319: error: for each function it appears in.) /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper6': /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:329: error: `PFIL_OUT' undeclared (first use in this function) /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: In function `iplattach': /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:376: warning: unused variable `ph_inet' /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:378: warning: unused variable `ph_inet6' /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c: At top level: /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:317: warning: `fr_check_wrapper' defined but not used /usr/src/sys/contrib/ipfilter/netinet/ip_fil.c:327: warning: `fr_check_wrapper6' defined but not used *** Error code 1 Stop in /usr/obj/usr/src/sys/AHAB. *** Error code 1 Stop in /usr/src. *** Error code 1 Ideas? Here is the updated kernconf link: http://www.dictos.com/AHAB Thanks, -Jason > Hi All, > > Here is what I get when I attempt to use any ipfilter type operations: > > jason@ahab:/home/jason# ipfw flush > Are you sure? [yn] y > > ipfw: setsockopt(IP_FW_FLUSH): Protocol not available > jason@ahab:/home/jason# > > Has the kernel configuration paramaters changed since the official cut of > 5.1? > Before the upgrade i could use ipfw. > > Here is a link to my kernconf file: > http://www.dictos.com/JASONKERN > > Thanks, > -Jason