From owner-freebsd-current@FreeBSD.ORG Mon Oct 25 20:19:51 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 172E216A4CE; Mon, 25 Oct 2004 20:19:51 +0000 (GMT) Received: from mail.mcneil.com (mcneil.com [24.199.45.54]) by mx1.FreeBSD.org (Postfix) with ESMTP id C610E43D1F; Mon, 25 Oct 2004 20:19:50 +0000 (GMT) (envelope-from sean@mcneil.com) Received: from localhost (localhost.mcneil.com [127.0.0.1]) by mail.mcneil.com (Postfix) with ESMTP id 805B6F1BC3; Mon, 25 Oct 2004 13:19:50 -0700 (PDT) Received: from mail.mcneil.com ([127.0.0.1]) by localhost (server.mcneil.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 41569-05; Mon, 25 Oct 2004 13:19:49 -0700 (PDT) Received: from [24.199.45.54] (mcneil.com [24.199.45.54]) by mail.mcneil.com (Postfix) with ESMTP id 2E056F1826; Mon, 25 Oct 2004 13:19:49 -0700 (PDT) From: Sean McNeil To: Andre Oppermann In-Reply-To: <417D5E51.2060100@freebsd.org> References: <417B128B.7080904@gddsn.org.cn> <20041024133045.40733f45@dolphin.local.net> <417D5E51.2060100@freebsd.org> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-E2DMfrG1wJifJJzBY0m9" Message-Id: <1098735588.41693.4.camel@server.mcneil.com> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Mon, 25 Oct 2004 13:19:49 -0700 X-Virus-Scanned: by amavisd-new at mcneil.com cc: "Conrad J. Sabatier" cc: freebsd-current@freebsd.org Subject: Re: make buildkernel failed related to ip_divert module X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Oct 2004 20:19:51 -0000 --=-E2DMfrG1wJifJJzBY0m9 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Mon, 2004-10-25 at 13:13, Andre Oppermann wrote: > Conrad J. Sabatier wrote: > > On Sun, 24 Oct 2004 13:30:45 -0500, "Conrad J. Sabatier" > > wrote: > >=20 > >=20 > >>On Sun, 24 Oct 2004 10:25:15 +0800, wsk wrote: > >> > >> > >>>rm -f hack.c > >>>MAKE=3D/usr/obj/usr/src/make.i386/make sh /usr/src/sys/conf/newvers.sh > >>>WSK cc -c -O -pipe -Wall -Wredundant-decls -Wnested-externs > >>>-Wstrict-prototypes -W missing-prototypes -Wpointer-arith -Winline > >>>-Wcast-qual -fformat-extensions -st d=3Dc99 -nostdinc -I- -I. > >>>-I/usr/src/sys -I/usr/src/sys/contrib/dev/acpica -I/us > >>>r/src/sys/contrib/altq -I/usr/src/sys/contrib/ipfilter > >>>-I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath > >>>-I/usr/src/sys/contrib/dev/ath/freebsd -I/usr/sr c/sys/contrib/ngatm > >>>-D_KERNEL -include opt_global.h -fno-common -finline-limit=3D8 000 > >>>--param inline-unit-growth=3D100 --param large-function-growth=3D1000 > >>>-mno-alig n-long-strings -mpreferred-stack-boundary=3D2 -ffreestanding > >>>-Werror vers.c linking kernel > >>>ip_divert.o(.text+0x1238): In function `div_modevent': > >>>: undefined reference to `ip_divert_ptr' > >>>ip_divert.o(.text+0x12c2): In function `div_modevent': > >>>: undefined reference to `ip_divert_ptr' > >>>*** Error code 1 > >>> > >>>Stop in /usr/obj/usr/src/sys/WSK. > >>>*** Error code 1 > >> > >>Same deal with amd64. > >=20 > >=20 > > For a further bit of clarification (I know, should have done this the > > first time): > >=20 > > This problem is occurring with the following kernel options: > >=20 > > options IPDIVERT > > options IPFILTER > > options IPFILTER_LOG > >=20 > > The only workaround at this time is adding "options IPFIREWALL". >=20 > Yes, that is correct. >=20 > IPDIVERT is a module now and you can dynamically load it just like you > can load ipfw (options IPFIREWALL). >=20 > IPDIVERT depends on ipfw being loaded or compiled into the kernel. >=20 > I have done the last step of IPDIVERT's transition into a KLD a few > minutes ago. It will warn you now if you try to compile it into a > kernel without IPFIREWALL as well. As a module it will simply complain > that ipfw needs to be loaded first. I build my kernel with options IPFIREWALL options IPFIREWALL_FORWARD options IPDIVERT Can I now use loadable modules as well? Will IPFIREWALL have the forwarding option or would I still have to specify that? I prefer a minimalist approach to my config and to load modules instead. Cheers, Sean --=-E2DMfrG1wJifJJzBY0m9 Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQBBfV/kyQsGN30uGE4RAmyWAKCHSe41i6Se65fkNz3FhIdW4v2/HgCeMhMa C0TfNwRv3MWYcvn9LArX0q0= =eLME -----END PGP SIGNATURE----- --=-E2DMfrG1wJifJJzBY0m9--