Re: FreeBSD4.7 custom kernel does not compile

[Harald Weis]

Darren Reed wrote:

In some email I received from Harald Weis, sie wrote:

I've just upgraded alright from FreeBSD4.5 to 4.7 using 4.7-mini.iso.
I've ``/stand/sysinstalled'' the kernel source from ftp3.fr.FreeBSD.org.
The custom kernel does not compile with the IPFILTER options:

[...]

When you say "upgraded", do you mean you preserved the disk contents from
4.5 to 4.7 ?

Darren

Sorry, I didn't look at my mail for some time, because I thought I had found the problem. The IPFILTER seemed to work, but in fact it did not work.

To answer your question: I preserved all disk contents except all binaries which define the new version:

algol {wei} ~ > uname -a
FreeBSD algol.adsl.nerim.net 4.7-STABLE FreeBSD 4.7-STABLE #0: Tue Nov 5 20:52:37 CET 2002 [EMAIL PROTECTED]:/usr/local/src/sys/compile/ALGOL i386
algol {wei} ~ >

I have not yet upgraded the /etc files.

Then I've installed the new XFree86-4.2.0_1,1 version.

Then I discovered that my last kernel config file did no longer compile
with the IPFILTER options (using the 4.7 kernel sources obviously):

algol {wei} /<1>compile/ALGOL # make
cc -c -O -pipe -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline
-Wcast-qual -fformat-extensions -ansi -nostdinc -I- -I. -I../.. -I/usr/include -I../../contrib/ipfilter -D_KERNEL -include opt_global.h -elf -mpreferred-stack-boundary=2 ../../contrib/ipfilter/netinet/fil.c
../../contrib/ipfilter/netinet/fil.c: In function `fr_makefrip':
../../contrib/ipfilter/netinet/fil.c:267: structure has no member named `fin_misc'
../../contrib/ipfilter/netinet/fil.c: In function `fr_check':
../../contrib/ipfilter/netinet/fil.c:1082: too few arguments to function `ipfr_newfrag'
../../contrib/ipfilter/netinet/fil.c:1092: too many arguments to function `fr_addstate'
*** Error code 1

Stop in /usr/local/src/sys/compile/ALGOL.
algol {wei} /<1>compile/ALGOL #

But it compiled OK without them.dmesg shows:
IP Filter: v3.4.29 initialized. Default = pass all, Logging = enabled

ipfstat -i is fine: the rules are unchanged,
but no packet comes in anymore.

Apparently, the config file must include
options IPFILTER
options IPFILTER_LOG

I found no reason why to change the old config file.


Sorry for being a bit long.

Thanks

Harald