On Fri, Jan 23, 2004 at 12:13:16AM +0100, Hanspeter Roth wrote:
Hello,
I'm trying to configure IPFILTER in 5.2-Release. But the compilation failes:
cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99 -nostdinc -I- -I. -I../../.. -I../../../contrib/dev/acpica -I../../../contrib/ipfilter -I../../../contrib/dev/ath -I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm -D_KERNEL -include opt_global.h -fno-common -finline-limit=15000 -fno-strict-aliasing -mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding -Werror ../../../contrib/ipfilter/netinet/ip_fil.c ../../../contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper': ../../../contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' undeclared (first use in this function)
I've copied the oppropriate options from /sys/conf/NOTES.
You missed the line four lines below options IPFILTER:
options PFIL_HOOKS #required by IPFILTER
Can we put PFIL_HOOKS in the GENERIC kernel config, so a person doesn't have to recompile the kernel to use IPFilter - like it was back in later versions of 4.x?
It seems kind of silly to have the default 5.x install come with a ipfilter kld module sitting there, a knob that can be used in rc.conf to enable it - but it can't be used without jumping through more hoops.
Barry
_______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[EMAIL PROTECTED]"