Skip site navigation (1)Skip section navigation (2)
Date:      06 Nov 2003 18:03:35 -0500
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        freebsd-questions@freebsd.org
Subject:   Re: make dev problems
Message-ID:  <44sml1cd6g.fsf@be-well.ilk.org>
In-Reply-To: <20031107080233.0900bd64.tim@spyderweb.com.au>
References:  <15502.216.237.145.172.1068153138.squirrel@mail02.oldskool.com> <20031107080233.0900bd64.tim@spyderweb.com.au>

index | next in thread | previous in thread | raw e-mail

Tim Aslat <tim@spyderweb.com.au> writes:

> In the immortal words of "Jason Burris" <spidey@oldskool.com>...
> > I need to compile a kernel with IPFW on a remote machine running
> > FreeBSD4.7.  I followed the steps listed at:
> > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-building.html
> 
> Following the handbook isn't a bad start.

It's nice to see someone actually do it for a change.

> > In my COMPUTERNAME config file I've add the following three lines to
> > the end for IPFW:
> > 
> > options IPFIREWALL
> > options IPFIREWALL_VERBOSE
> > options IPFIREWALL_DEFAULT_TO_ACCEPT
> > 
> > And I changed this line, which I read was necessary:
> > 
> > ident COMPUTERNAME
> 
> Not bad, but a more secure way would be to default to deny rather than
> accept, but that's personal preference.

In this case, where the machine is remote and you could lock yourself
out, it's probably better to default to accept instead.  Eventually,
there will be a firewall rule denying unmatched packets, and even then
you have to be careful about backing out the ruleset automatically if
you lock yourself out.

> > I'm able to run:
> > 
> > /usr/sbin/config COMPUTERNAME
> > cd ../../compile/COMPUTERNAME
> > 
> > When I run
> > 
> > make depend
> > 
> > Everything runs fine until it dies with the error:
> > 
> > make: don't know how to make iconv.h.
> > Stop*** Error code 2
> > Stop in /usr/src/sys/modules.***
> > Error code 1
> > 
> > I've checked and this file is in my /usr/src/sys directory.What am I
> > doing wrong?  Do I even need this header to be compiled intothe
> > kernel?
> 
> You might want to try the "newer" method of building a kernel.
> 
> cd /usr/src
> make buildkernel KERNCONF=COMPUTERNAME
> <wait a bit>
> make installkernel KERNCONF=COMPUTERNAME

I don't think that will be any better.  Either way, he needs to have
sources that match his system, and the "old" way will work fine when
that is the case.


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44sml1cd6g.fsf>