Date: Thu, 15 Nov 2001 02:11:43 -0500 (EST) From: Jason Hunt <leth@primus.ca> To: freebsd-stable@FreeBSD.ORG Cc: Dinesh Nair <dinesh@alphaque.com> Subject: Re: ipfw fails between 10/17 and 11/6 Message-ID: <Pine.BSF.4.40.0111150205530.47512-100000@lethargic.dyndns.org> In-Reply-To: <Pine.BSF.4.21.0111151446140.509-100000@prophet.alphaque.com>
next in thread | previous in thread | raw e-mail | index | archive | help
I'd say that it is definately a userland and kernel mismatch. You COULD try recompiling the ipfw stuff. I'm sure lots could have changed even in two to three weeks, especially with the UPDATING stating that it was merged from -current.. I don't see why you would cvsup w/o the intention of rebuilding the world. :) Just my two cents. On Thu, 15 Nov 2001, Dinesh Nair wrote: > > here's an odd situation. > > cvsupped on october 17th, built and installed world, mergemastered, and > everything runs fine. no problems here. > > since october 17, i've been cvsupping to RELENG_4, but not building world > or even the kernel. > > the last cvsup is on november 6. > > today, i decide to build a new kernel, so mosey on into > /usr/src/sys/i386/conf, config and build a new kernel. didnt forget to do > a make depend either. installed the new kernel. > > upon rebooting with the new kernel, ipfw stops working. dmesg shows these > lines: > > [start dmesg] > IPFW: MOD_LOAD > IP packet filtering initialized, divert disabled, rule-based forwarding > enabled, default to deny, logging limited to 100 packets/entry by default > [end dmesg] > > which is odd, since i had IPFIREWALL compiled in the kernel, and was _not_ > loading ipfw.ko thru /boot/loader.conf. /sbin/ipfw commands after that > fail the execute and dump core. removing IPFIREWALL and related options > from the kernel doesnt help either. i never got the "IPFW: MOD_LOAD" line > during the previous (oct 17) kernel. > > reverting back to the october 17 kernel brings all things back to normal. > > i know this sounds like a classic case of mismatch between userland and > kernel, but they sources are just two weeks old, and both are RELENG_4 > anyways. > > reading /usr/src/UPDATING says > > 20011102: > ipfw/bridge/dummynet features merged from current. > > freebsd-stable archives brings up luigi's message that /sbin/ipfw and > ipfw.ko need to be rebuilt. however, when i cd into /usr/src/sbin/ipfw and > type make, i get the following error: > > cc -O -pipe -Wall -c /usr/src/sbin/ipfw/ipfw.c > /usr/src/sbin/ipfw/ipfw.c:177: `DYN_SRC_ADDR' undeclared here (not in a function) > /usr/src/sbin/ipfw/ipfw.c:177: initializer element is not constant > /usr/src/sbin/ipfw/ipfw.c:177: (near initialization for `limit_masks[0].x') > /usr/src/sbin/ipfw/ipfw.c:178: `DYN_SRC_PORT' undeclared here (not in a function) > /usr/src/sbin/ipfw/ipfw.c:178: initializer element is not constant > /usr/src/sbin/ipfw/ipfw.c:178: (near initialization for `limit_masks[1].x') > /usr/src/sbin/ipfw/ipfw.c:179: `DYN_DST_ADDR' undeclared here (not in a function) > /usr/src/sbin/ipfw/ipfw.c:179: initializer element is not constant > /usr/src/sbin/ipfw/ipfw.c:179: (near initialization for `limit_masks[2].x') > /usr/src/sbin/ipfw/ipfw.c:180: `DYN_DST_PORT' undeclared here (not in a function) > /usr/src/sbin/ipfw/ipfw.c:180: initializer element is not constant > /usr/src/sbin/ipfw/ipfw.c:180: (near initialization for `limit_masks[3].x') > /usr/src/sbin/ipfw/ipfw.c: In function `show_ipfw': > /usr/src/sbin/ipfw/ipfw.c:219: structure has no member named `dont_match_prob' > /usr/src/sbin/ipfw/ipfw.c:390: structure has no member named `dyn_type' > /usr/src/sbin/ipfw/ipfw.c:394: `DYN_KEEP_STATE' undeclared (first use in this function) > /usr/src/sbin/ipfw/ipfw.c:394: (Each undeclared identifier is reported only once > /usr/src/sbin/ipfw/ipfw.c:394: for each function it appears in.) > /usr/src/sbin/ipfw/ipfw.c:397: `DYN_LIMIT' undeclared (first use in this function) > /usr/src/sbin/ipfw/ipfw.c:400: structure has no member named `limit_mask' > /usr/src/sbin/ipfw/ipfw.c:402: structure has no member named `conn_limit' > /usr/src/sbin/ipfw/ipfw.c:392: warning: unreachable code at beginning of switch statement > /usr/src/sbin/ipfw/ipfw.c: In function `list': > /usr/src/sbin/ipfw/ipfw.c:826: structure has no member named `rule' > /usr/src/sbin/ipfw/ipfw.c:830: structure has no member named `dyn_type' > /usr/src/sbin/ipfw/ipfw.c:831: `DYN_LIMIT_PARENT' undeclared (first use in this function) > /usr/src/sbin/ipfw/ipfw.c:832: structure has no member named `count' > /usr/src/sbin/ipfw/ipfw.c:834: `DYN_LIMIT' undeclared (first use in this function) > /usr/src/sbin/ipfw/ipfw.c:837: `DYN_KEEP_STATE' undeclared (first use in this function) > /usr/src/sbin/ipfw/ipfw.c:832: warning: unreachable code at beginning of switch statement > /usr/src/sbin/ipfw/ipfw.c: In function `add': > /usr/src/sbin/ipfw/ipfw.c:1656: structure has no member named `dont_match_prob' > /usr/src/sbin/ipfw/ipfw.c:1920: structure has no member named `dyn_type' > /usr/src/sbin/ipfw/ipfw.c:1920: `DYN_LIMIT' undeclared (first use in this function) > /usr/src/sbin/ipfw/ipfw.c:1921: structure has no member named `limit_mask' > /usr/src/sbin/ipfw/ipfw.c:1927: structure has no member named `limit_mask' > /usr/src/sbin/ipfw/ipfw.c:1937: structure has no member named `conn_limit' > /usr/src/sbin/ipfw/ipfw.c:1938: structure has no member named `conn_limit' > /usr/src/sbin/ipfw/ipfw.c:1940: structure has no member named `limit_mask' > /usr/src/sbin/ipfw/ipfw.c:1949: structure has no member named `dyn_type' > *** Error code 1 > > Stop in /usr/src/sbin/ipfw. > > any clues as to how i could resolve this issue ? problem seems to be > halting me from building any new kernel until this is handled well. > > Regards, /\_/\ "All dogs go to heaven." > dinesh@alphaque.com (0 0) http://www.alphaque.com/ > +==========================----oOO--(_)--OOo----==========================+ > | for a in past present future; do | > | for b in clients employers associates relatives neighbours pets; do | > | echo "The opinions here in no way reflect the opinions of my $a $b." | > | done; done | > +=========================================================================+ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.40.0111150205530.47512-100000>