Brooks Davis wrote:

On Fri, Jan 23, 2004 at 12:13:16AM +0100, Hanspeter Roth wrote:

Hello,

I'm trying to configure IPFILTER in 5.2-Release. But the compilation
failes:

cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs 
-Wstrict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99 -nostdinc -I-  -I. -I../../.. 
-I../../../contrib/dev/acpica -I../../../contrib/ipfilter -I../../../contrib/dev/ath 
-I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm -D_KERNEL -include 
opt_global.h -fno-common -finline-limit=15000 -fno-strict-aliasing  
-mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding -Werror 
../../../contrib/ipfilter/netinet/ip_fil.c
../../../contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper':
../../../contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' undeclared (first 
use in this function)

I've copied the oppropriate options from /sys/conf/NOTES.


You missed the line four lines below options IPFILTER:

options PFIL_HOOKS #required by IPFILTER

Can we put PFIL_HOOKS in the GENERIC kernel config, so a person doesn't have to recompile the kernel to use IPFilter - like it was back in later versions of 4.x?


It seems kind of silly to have the default 5.x install come with a ipfilter kld module sitting there, a knob that can be used in rc.conf to enable it - but it can't be used without jumping through more hoops.

Barry

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to