Re: Ipfilter broken on -current

2003-10-04 Thread Udo Schweigert
On Sat, Oct 04, 2003 at 13:01:31 +0200, Arjan van Leeuwen wrote: > On Saturday 04 October 2003 11:21, Udo Schweigert wrote: >> Hi all, >> >> since a couple of days ipfilter is broken for -current. >> >> kldload ipl.ko gives: >> link_elf: symbol pfil_head_get undefined >> >> And the IPFILTER option

Re: Ipfilter broken on -current

2003-10-04 Thread Arjan van Leeuwen
On Saturday 04 October 2003 11:21, Udo Schweigert wrote: > Hi all, > > since a couple of days ipfilter is broken for -current. > > kldload ipl.ko gives: > link_elf: symbol pfil_head_get undefined > > And the IPFILTER option inside the kernel-config results in: > (snip) You should read /usr/src/UPD

Ipfilter broken on -current

2003-10-04 Thread Udo Schweigert
Hi all, since a couple of days ipfilter is broken for -current. kldload ipl.ko gives: link_elf: symbol pfil_head_get undefined And the IPFILTER option inside the kernel-config results in: cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-pro

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 09:00:22AM -0800, Terry Lambert wrote: > > I noticed that port 53 UDP (yes, UDP) gets through fine, though. > > > Try disabling delayed ACK in the TCP stack; it's a sysctl. > > -- Terry Been there, done that. No difference though. Jiawei -- "Without the userland, the k

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread Terry Lambert
leafy wrote: > On Thu, Mar 06, 2003 at 11:22:29PM +0800, leafy wrote: > > On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: > > > Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution > > > for sshd (which happened no matter what the configuration said) run > > All,

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 11:22:29PM +0800, leafy wrote: > On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: > > Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution > > for sshd (which happened no matter what the configuration said) run > All, including ssh. Only IC

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: > Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution > for sshd (which happened no matter what the configuration said) run All, including ssh. Only ICMP responds in time. > connection arrives). If blackhole or fi

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread Daniel C. Sobral
leafy wrote: > With IPFILTER enabled in the kernel, all socket(2) calls > inbound/outbound are very slow. A normal SSH connection within the > same subnet takes 5 minutes to connect. Anything I can provide to pin > down the problem? Are you sure _all_ socket calls are slow? 5.0-R had reverse reso

IPFILTER broken as of world/kernel a few hours old

2003-03-04 Thread leafy
With IPFILTER enabled in the kernel, all socket(2) calls inbound/outbound are very slow. A normal SSH connection within the same subnet takes 5 minutes to connect. Anything I can provide to pin down the problem? Jiawei -- "Without the userland, the kernel is useless."

Re: ipfilter broken?

2001-02-13 Thread Dag-Erling Smorgrav
Donny Lee <[EMAIL PROTECTED]> writes: > Dag-Erling Smorgrav wrote: > > > config -r mykernel > > No point. > -r removes objects generated by a previous kernel config, i guess. Still no point. Unless your tree is hosed, make(1) takes care of that, as long as you don't screw up by running all

Re: ipfilter broken?

2001-02-13 Thread Donny Lee
Dag-Erling Smorgrav wrote: > > By doing so, I also noticed that, the general procedule i > > used to take: > > cd /sys/i386/conf > > config -r mykernel > ^^ > No point. -r removes objects generated by a previous kernel config, i guess. > > cd ../../compile/myk

Re: ipfilter broken?

2001-02-13 Thread Dag-Erling Smorgrav
Donny Lee <[EMAIL PROTECTED]> writes: > By doing so, I also noticed that, the general procedule i > used to take: > > cd /sys/i386/conf > config -r mykernel ^^ No point. > cd ../../compile/mykernel > make depend all install ^^ Wr

Re: ipfilter broken?

2001-02-13 Thread Donny Lee
David O'Brien wrote: > > > Looks like a stale dependency file to me. Try 'make cleandir' twice, > > > followed by the usual 'make depend && make && make install'. > > Yes, but got no luck, stops at the same place.:) > cd /sys/compile/ > rm -rf modules > make depend > make thanks, it w

Re: ipfilter broken?

2001-02-13 Thread David O'Brien
On Tue, Feb 13, 2001 at 11:15:24AM +0100, Dag-Erling Smorgrav wrote: > "David O'Brien" <[EMAIL PROTECTED]> writes: > > On Tue, Feb 13, 2001 at 05:18:04AM +0100, Dag-Erling Smorgrav wrote: > > > Donny Lee <[EMAIL PROTECTED]> writes: > > > > ===>ipfilter > > > > make: don't know how to make machin

Re: ipfilter broken?

2001-02-13 Thread Dag-Erling Smorgrav
"David O'Brien" <[EMAIL PROTECTED]> writes: > On Tue, Feb 13, 2001 at 05:18:04AM +0100, Dag-Erling Smorgrav wrote: > > Donny Lee <[EMAIL PROTECTED]> writes: > > > ===>ipfilter > > > make: don't know how to make machine/lock.h Stop. > > > *** Error code 2 > > Looks like a stale dependency file

Re: ipfilter broken?

2001-02-13 Thread David O'Brien
On Tue, Feb 13, 2001 at 05:18:04AM +0100, Dag-Erling Smorgrav wrote: > Donny Lee <[EMAIL PROTECTED]> writes: > > ===>ipfilter > > make: don't know how to make machine/lock.h Stop. > > *** Error code 2 > > Looks like a stale dependency file to me. Try 'make cleandir' twice, That only works i

Re: ipfilter broken?

2001-02-13 Thread David O'Brien
On Tue, Feb 13, 2001 at 04:00:26PM +0800, Donny Lee wrote: > Dag-Erling Smorgrav wrote: > > > ===>ipfilter > > > make: don't know how to make machine/lock.h Stop. > > > *** Error code 2 > > Looks like a stale dependency file to me. Try 'make cleandir' twice, > > followed by the usual 'make de

Re: ipfilter broken?

2001-02-12 Thread Donny Lee
Dag-Erling Smorgrav wrote: > > ===>ipfilter > > make: don't know how to make machine/lock.h Stop. > > *** Error code 2 > Looks like a stale dependency file to me. Try 'make cleandir' twice, > followed by the usual 'make depend && make && make install'. Yes, but got no luck, stops at the sa

Re: ipfilter broken?

2001-02-12 Thread Dag-Erling Smorgrav
Donny Lee <[EMAIL PROTECTED]> writes: > ===>ipfilter > make: don't know how to make machine/lock.h Stop. > *** Error code 2 Looks like a stale dependency file to me. Try 'make cleandir' twice, followed by the usual 'make depend && make && make install'. DES -- Dag-Erling Smorgrav - [EMAIL

ipfilter broken?

2001-02-12 Thread Donny Lee
Hi there, I'm not sure if this related to the thread of -current these days. my world builds fine with the latest cvsup, maybe only 1 or 2 hrs ago. no more luck, my kernel building stoped here: ===>ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Stop in