From owner-freebsd-current@FreeBSD.ORG Mon Oct 25 20:42:45 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8175F16A4CE; Mon, 25 Oct 2004 20:42:45 +0000 (GMT) Received: from mail.mcneil.com (mcneil.com [24.199.45.54]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6147543D58; Mon, 25 Oct 2004 20:42:45 +0000 (GMT) (envelope-from sean@mcneil.com) Received: from localhost (localhost.mcneil.com [127.0.0.1]) by mail.mcneil.com (Postfix) with ESMTP id 1C340F1BC4; Mon, 25 Oct 2004 13:42:45 -0700 (PDT) Received: from mail.mcneil.com ([127.0.0.1]) by localhost (server.mcneil.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 41600-10; Mon, 25 Oct 2004 13:42:44 -0700 (PDT) Received: from [24.199.45.54] (mcneil.com [24.199.45.54]) by mail.mcneil.com (Postfix) with ESMTP id 10E70F18B8; Mon, 25 Oct 2004 13:42:44 -0700 (PDT) From: Sean McNeil To: Andre Oppermann In-Reply-To: <417D6148.6050807@freebsd.org> References: <417B128B.7080904@gddsn.org.cn> <417D5E51.2060100@freebsd.org><417D6148.6050807@freebsd.org> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-ww18xAL64SjS9RbETnBP" Message-Id: <1098736963.44975.3.camel@server.mcneil.com> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Mon, 25 Oct 2004 13:42:44 -0700 X-Virus-Scanned: by amavisd-new at mcneil.com cc: "Conrad J. Sabatier" cc: freebsd-current@freebsd.org Subject: Re: make buildkernel failed related to ip_divert module X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Oct 2004 20:42:45 -0000 --=-ww18xAL64SjS9RbETnBP Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Mon, 2004-10-25 at 13:25, Andre Oppermann wrote: > Sean McNeil wrote: > > On Mon, 2004-10-25 at 13:13, Andre Oppermann wrote: > >>Conrad J. Sabatier wrote: > >>>For a further bit of clarification (I know, should have done this the > >>>first time): > >>> > >>>This problem is occurring with the following kernel options: > >>> > >>>options IPDIVERT > >>>options IPFILTER > >>>options IPFILTER_LOG > >>> > >>>The only workaround at this time is adding "options IPFIREWALL". > >> > >>Yes, that is correct. > >> > >>IPDIVERT is a module now and you can dynamically load it just like you > >>can load ipfw (options IPFIREWALL). > >> > >>IPDIVERT depends on ipfw being loaded or compiled into the kernel. > >> > >>I have done the last step of IPDIVERT's transition into a KLD a few > >>minutes ago. It will warn you now if you try to compile it into a > >>kernel without IPFIREWALL as well. As a module it will simply complain > >>that ipfw needs to be loaded first. > >=20 > >=20 > > I build my kernel with > >=20 > > options IPFIREWALL > > options IPFIREWALL_FORWARD > > options IPDIVERT > >=20 > > Can I now use loadable modules as well? Will IPFIREWALL have the > > forwarding option or would I still have to specify that? >=20 > You can certainly use IPDIVERT as a loadable module. The FORWARD option > to IPFIREWALL needs to be compiled into the module if you want to load > it as a module. For modules options in the kernel configuration file > are not automatically included. You have to edit sys/modules/ipfw/Makefi= le > instead. Then you can load everything as module. If you start natd from > rc.conf it will load ipdivert.ko automatically (if you have run mergemast= er > to update your rc scripts). OK, thanks. I thought someone was working on module configuration from the kernel configuration file instead of having to hack the Makefile for each module. That is a pita. Cheers, Sean --=-ww18xAL64SjS9RbETnBP Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQBBfWVDyQsGN30uGE4RAsUjAJkBveL/vSUpFlsM2yJwMgchhIpNQwCg2kH9 aUSQKw0Dg90DzESF/kOuDKI= =M4iy -----END PGP SIGNATURE----- --=-ww18xAL64SjS9RbETnBP--