Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Mar 97 15:50:35 +0100
From:      garyj@frt.dec.com
To:        hackers@freebsd.org
Subject:   Re: ipfilter 
Message-ID:  <9703111450.AA09467@cssmuc.frt.dec.com>
In-Reply-To: Message from j@uriah.heep.sax.de (J Wunsch)  of Tue, 11 Mar 97  13:56:59 %2B0100.

next in thread | raw e-mail | index | archive | help

j@uriah.heep.sax.de writes:
> As Darren Reed wrote:
> 
> > Second, someone mentioned that prototyping was required for it to compile
> > properly in the kernel.
> 
> No, not required, although it looks a little frightening to the
> innocent to watch all these ``function declaration is not a
> prototype'' warnings.  As i wrote you, i also gave up in trying to fix
> this.  If it had been only this, this weren't the show-stopper.
> 
> > Third, it doesn't "make dep" very well due to the include's all using
> > "" and not <>.
> 
> Not only make depend, but the entirely build falls over it.  However,
> that's very easy to fix.
> 
> I investigated more, since i was really in the moot to also merge this
> into 2.2 as well, but i later on found that it was far off from
> becoming functional anytime soon:
> 
> . The kernel stuff didn't setup device nodes, so even though i've got
>   it to compile in the end, the devices were inaccessible.  Things have
>   been changing quite some bit between 2.1.x and 2.2, the cdevsw table
>   is now `distributed' into each device driver itself.
> 
> . The entire Makefile hierarchy for the userland stuff was still missing,
>   something that refers to the /usr/contrib/ipfilter files by .PATH
>   statements, and builds and installs all the binaries and man pages.
> 
> At this point, i simply ran out of time, realizing that i won't be
> able to test it at all anyway (i don't have the slightest clues about
> how things are supposed to work together, nor do i have a good testing
> environment for an ipfilter at all).  Since Peter expressed interest
> in pursuing ipfilter further, i've sent him the kernel patches that
> made the kernel compile, in the hope he would go on.  Seems he also
> had to rearrange his priorities, however.
> 

Sorry to keep so much of the old mail, but a little history is required,
IMHO.

I actually did all this stuff for an older version of 2.2 and it's now
running successfully on several machines. I stopped working on it when
I heard that Darren was going to import it. I might be able to convince
the person running it (Hi, Michael !) to give it a test.

I'm willing to pick it back up again, since I did get it working at one
time.

What's the target ? 2.2 and -current or 2.1.x also ? Could be tough for
me to test it under 2.1.x since I don't know anyone who's running that.
And -current is in such a state of flux that it isn't practical to
pursue it there until Peter finishes his mega-commit, if then.

And which version of ipfilter ? What's currently in /usr/src/contrib ?
Or is a newer version of the source in the offing ?

---
Gary Jennejohn				(work) gjennejohn@frt.dec.com
					(home) Gary.Jennejohn@munich.netsurf.de
					(play) gj@freebsd.org





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9703111450.AA09467>