From owner-freebsd-current@FreeBSD.ORG Mon Oct 25 20:13:08 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 678A416A4CE for ; Mon, 25 Oct 2004 20:13:08 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id A115743D2D for ; Mon, 25 Oct 2004 20:13:07 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 13715 invoked from network); 25 Oct 2004 20:10:59 -0000 Received: from dotat.atdotat.at (HELO [62.48.0.47]) ([62.48.0.47]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 25 Oct 2004 20:10:59 -0000 Message-ID: <417D5E51.2060100@freebsd.org> Date: Mon, 25 Oct 2004 22:13:05 +0200 From: Andre Oppermann User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a1) Gecko/20040520 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Conrad J. Sabatier" References: <417B128B.7080904@gddsn.org.cn> <20041024133045.40733f45@dolphin.local.net> <20041024144743.37fb5c69@dolphin.local.net> In-Reply-To: <20041024144743.37fb5c69@dolphin.local.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-current@freebsd.org Subject: Re: make buildkernel failed related to ip_divert module X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Oct 2004 20:13:08 -0000 Conrad J. Sabatier wrote: > On Sun, 24 Oct 2004 13:30:45 -0500, "Conrad J. Sabatier" > wrote: > > >>On Sun, 24 Oct 2004 10:25:15 +0800, wsk wrote: >> >> >>>rm -f hack.c >>>MAKE=/usr/obj/usr/src/make.i386/make sh /usr/src/sys/conf/newvers.sh >>>WSK cc -c -O -pipe -Wall -Wredundant-decls -Wnested-externs >>>-Wstrict-prototypes -W missing-prototypes -Wpointer-arith -Winline >>>-Wcast-qual -fformat-extensions -st d=c99 -nostdinc -I- -I. >>>-I/usr/src/sys -I/usr/src/sys/contrib/dev/acpica -I/us >>>r/src/sys/contrib/altq -I/usr/src/sys/contrib/ipfilter >>>-I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath >>>-I/usr/src/sys/contrib/dev/ath/freebsd -I/usr/sr c/sys/contrib/ngatm >>>-D_KERNEL -include opt_global.h -fno-common -finline-limit=8 000 >>>--param inline-unit-growth=100 --param large-function-growth=1000 >>>-mno-alig n-long-strings -mpreferred-stack-boundary=2 -ffreestanding >>>-Werror vers.c linking kernel >>>ip_divert.o(.text+0x1238): In function `div_modevent': >>>: undefined reference to `ip_divert_ptr' >>>ip_divert.o(.text+0x12c2): In function `div_modevent': >>>: undefined reference to `ip_divert_ptr' >>>*** Error code 1 >>> >>>Stop in /usr/obj/usr/src/sys/WSK. >>>*** Error code 1 >> >>Same deal with amd64. > > > For a further bit of clarification (I know, should have done this the > first time): > > This problem is occurring with the following kernel options: > > options IPDIVERT > options IPFILTER > options IPFILTER_LOG > > The only workaround at this time is adding "options IPFIREWALL". Yes, that is correct. IPDIVERT is a module now and you can dynamically load it just like you can load ipfw (options IPFIREWALL). IPDIVERT depends on ipfw being loaded or compiled into the kernel. I have done the last step of IPDIVERT's transition into a KLD a few minutes ago. It will warn you now if you try to compile it into a kernel without IPFIREWALL as well. As a module it will simply complain that ipfw needs to be loaded first. -- Andre