Date: Thu, 15 Nov 2001 14:50:35 +0800 (MYT) From: Dinesh Nair <dinesh@alphaque.com> To: freebsd-stable@freebsd.org Subject: ipfw fails between 10/17 and 11/6 Message-ID: <Pine.BSF.4.21.0111151446140.509-100000@prophet.alphaque.com>
next in thread | raw e-mail | index | archive | help
here's an odd situation.
cvsupped on october 17th, built and installed world, mergemastered, and
everything runs fine. no problems here.
since october 17, i've been cvsupping to RELENG_4, but not building world
or even the kernel.
the last cvsup is on november 6.
today, i decide to build a new kernel, so mosey on into
/usr/src/sys/i386/conf, config and build a new kernel. didnt forget to do
a make depend either. installed the new kernel.
upon rebooting with the new kernel, ipfw stops working. dmesg shows these
lines:
[start dmesg]
IPFW: MOD_LOAD
IP packet filtering initialized, divert disabled, rule-based forwarding
enabled, default to deny, logging limited to 100 packets/entry by default
[end dmesg]
which is odd, since i had IPFIREWALL compiled in the kernel, and was _not_
loading ipfw.ko thru /boot/loader.conf. /sbin/ipfw commands after that
fail the execute and dump core. removing IPFIREWALL and related options
from the kernel doesnt help either. i never got the "IPFW: MOD_LOAD" line
during the previous (oct 17) kernel.
reverting back to the october 17 kernel brings all things back to normal.
i know this sounds like a classic case of mismatch between userland and
kernel, but they sources are just two weeks old, and both are RELENG_4
anyways.
reading /usr/src/UPDATING says
20011102:
ipfw/bridge/dummynet features merged from current.
freebsd-stable archives brings up luigi's message that /sbin/ipfw and
ipfw.ko need to be rebuilt. however, when i cd into /usr/src/sbin/ipfw and
type make, i get the following error:
cc -O -pipe -Wall -c /usr/src/sbin/ipfw/ipfw.c
/usr/src/sbin/ipfw/ipfw.c:177: `DYN_SRC_ADDR' undeclared here (not in a function)
/usr/src/sbin/ipfw/ipfw.c:177: initializer element is not constant
/usr/src/sbin/ipfw/ipfw.c:177: (near initialization for `limit_masks[0].x')
/usr/src/sbin/ipfw/ipfw.c:178: `DYN_SRC_PORT' undeclared here (not in a function)
/usr/src/sbin/ipfw/ipfw.c:178: initializer element is not constant
/usr/src/sbin/ipfw/ipfw.c:178: (near initialization for `limit_masks[1].x')
/usr/src/sbin/ipfw/ipfw.c:179: `DYN_DST_ADDR' undeclared here (not in a function)
/usr/src/sbin/ipfw/ipfw.c:179: initializer element is not constant
/usr/src/sbin/ipfw/ipfw.c:179: (near initialization for `limit_masks[2].x')
/usr/src/sbin/ipfw/ipfw.c:180: `DYN_DST_PORT' undeclared here (not in a function)
/usr/src/sbin/ipfw/ipfw.c:180: initializer element is not constant
/usr/src/sbin/ipfw/ipfw.c:180: (near initialization for `limit_masks[3].x')
/usr/src/sbin/ipfw/ipfw.c: In function `show_ipfw':
/usr/src/sbin/ipfw/ipfw.c:219: structure has no member named `dont_match_prob'
/usr/src/sbin/ipfw/ipfw.c:390: structure has no member named `dyn_type'
/usr/src/sbin/ipfw/ipfw.c:394: `DYN_KEEP_STATE' undeclared (first use in this function)
/usr/src/sbin/ipfw/ipfw.c:394: (Each undeclared identifier is reported only once
/usr/src/sbin/ipfw/ipfw.c:394: for each function it appears in.)
/usr/src/sbin/ipfw/ipfw.c:397: `DYN_LIMIT' undeclared (first use in this function)
/usr/src/sbin/ipfw/ipfw.c:400: structure has no member named `limit_mask'
/usr/src/sbin/ipfw/ipfw.c:402: structure has no member named `conn_limit'
/usr/src/sbin/ipfw/ipfw.c:392: warning: unreachable code at beginning of switch statement
/usr/src/sbin/ipfw/ipfw.c: In function `list':
/usr/src/sbin/ipfw/ipfw.c:826: structure has no member named `rule'
/usr/src/sbin/ipfw/ipfw.c:830: structure has no member named `dyn_type'
/usr/src/sbin/ipfw/ipfw.c:831: `DYN_LIMIT_PARENT' undeclared (first use in this function)
/usr/src/sbin/ipfw/ipfw.c:832: structure has no member named `count'
/usr/src/sbin/ipfw/ipfw.c:834: `DYN_LIMIT' undeclared (first use in this function)
/usr/src/sbin/ipfw/ipfw.c:837: `DYN_KEEP_STATE' undeclared (first use in this function)
/usr/src/sbin/ipfw/ipfw.c:832: warning: unreachable code at beginning of switch statement
/usr/src/sbin/ipfw/ipfw.c: In function `add':
/usr/src/sbin/ipfw/ipfw.c:1656: structure has no member named `dont_match_prob'
/usr/src/sbin/ipfw/ipfw.c:1920: structure has no member named `dyn_type'
/usr/src/sbin/ipfw/ipfw.c:1920: `DYN_LIMIT' undeclared (first use in this function)
/usr/src/sbin/ipfw/ipfw.c:1921: structure has no member named `limit_mask'
/usr/src/sbin/ipfw/ipfw.c:1927: structure has no member named `limit_mask'
/usr/src/sbin/ipfw/ipfw.c:1937: structure has no member named `conn_limit'
/usr/src/sbin/ipfw/ipfw.c:1938: structure has no member named `conn_limit'
/usr/src/sbin/ipfw/ipfw.c:1940: structure has no member named `limit_mask'
/usr/src/sbin/ipfw/ipfw.c:1949: structure has no member named `dyn_type'
*** Error code 1
Stop in /usr/src/sbin/ipfw.
any clues as to how i could resolve this issue ? problem seems to be
halting me from building any new kernel until this is handled well.
Regards, /\_/\ "All dogs go to heaven."
dinesh@alphaque.com (0 0) http://www.alphaque.com/
+==========================----oOO--(_)--OOo----==========================+
| for a in past present future; do |
| for b in clients employers associates relatives neighbours pets; do |
| echo "The opinions here in no way reflect the opinions of my $a $b." |
| done; done |
+=========================================================================+
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0111151446140.509-100000>