Trying to install 4.15 on FreeBSD 5.3 fails. Evidence attached below.
Question: Is there a FreeBSD-5.0/ directory planned for inclusion in the
sourcetree? If not, has anyone been able to successfully compile 4.1.5
into FBSD 5.3 kernel, and if so, would anyone be willing to share their
secrets?
Another Question: What is the status of any/all 4.x.x documentation. I
recall glancing over a message from Phil maybe, about the HOWTO being
updated to reflect new features etc., but cannot find any reference to
such message now.
Finally, Darren: In the 4.1 release email, you mentioned that Firewall
Synchonization: Programs exist. Where could one find the documentation
on that, other than of course in the code itself ;-) BTW, since this is
my first message to the list, although I've been on it for 4+ years...
Darren, kudos x10 to you for IPFilter. I've been a happy user of 3.x.x
for years. I am looking forward to 4.x.x though...
First, make freebsd5 complains:
==================
cc -Wall -Wuninitialized -Wstrict-prototypes -O -I. -g -I../..
-D_BSD_SOURCE -DIPFILTER_LKM -DIPFILTER_LOG -DIPFILTER_LOOKUP
-DIPFILTER_SCAN -Di386 -D__i386__ -DINET -DKERNEL -D_KERNEL
-I/usr/include -I/sys -I/sys/sys -I/sys/arch -DDEVFS -DKLD_MODULE -c
ip_fil.c -o ip_fil.o
In file included from ip_fil.c:47:
/sys/sys/systm.h:149: warning: conflicting types for built-in function
'log'
In file included from /sys/sys/systm.h:239,
from ip_fil.c:47:
/sys/sys/libkern.h:100: warning: conflicting types for built-in function
'strdup'
In file included from /sys/vm/uma.h:39,
from /sys/sys/mbuf.h:40,
from ip_fil.c:54:
/sys/sys/malloc.h:105: warning: conflicting types for built-in function
'malloc'
ip_fil.c: In function `iplwrite':
ip_fil.c:734: error: argument "dev" doesn't match prototype
../../netinet/ip_fil.h:1209: error: prototype declaration
*** Error code 1
Stop in /usr/distribs/ip_fil4.1.5/BSD/FreeBSD-5.3-RELEASE-i386.
*** Error code 1
Stop in /usr/distribs/ip_fil4.1.5.
===================
Upon changing the function declaration in ip_fil.c to fix that problem:
Form
dev_t dev to struct cdev *dev
the compilation succeeds, but attempt to install into kernel sources
with Freebsd/kinstall produces the following:
===================
straznik1# FreeBSD/kinstall
Installing ip_auth.c ip_auth.h ip_fil.c ip_fil.h ip_frag.c ip_frag.h
ip_nat.c ip_nat.h ip_pool.c ip_pool.h ip_proxy.c ip_proxy.h ip_scan.c
ip_scan.h ip_state.c ip_state.h ip_sync.c ip_sync.h fil.c ip_ftp_pxy.c
ip_h323_pxy.c ip_ipsec_pxy.c ip_irc_pxy.c ip_netbios_pxy.c ip_pptp_pxy.c
ip_raudio_pxy.c ip_rcmd_pxy.c ip_rpcb_pxy.c ip_compat.h ip_log.c
Patching /sys/i386/i386/conf.c
Hmm... Looks like a new-style context diff to me...
The text leading up to this was:
--------------------------
|*** conf.c.orig Sun Jan 14 15:39:32 1996
|--- conf.c Sun Jan 14 15:48:21 1996
--------------------------
===================
With freebsd4/kinstall:
===================
straznik1# FreeBSD-4.0/kinstall
Installing ip_auth.c ip_auth.h ip_fil.c ip_fil.h ip_nat.c ip_nat.h
ip_pool.c ip_pool.h ip_proxy.c ip_proxy.h ip_scan.c ip_scan.h ip_state.c
ip_state.h ip_sync.c ip_sync.h fil.c ip_ftp_pxy.c ip_h323_pxy.c
ip_ipsec_pxy.c ip_irc_pxy.c ip_netbios_pxy.c ip_pptp_pxy.c
ip_raudio_pxy.c ip_rcmd_pxy.c ip_rpcb_pxy.c mlfk_ipl.c ipl.h ip_compat.h
ip_log.c
Linking /usr/include/osreldate.h to /sys/sys/osreldate.h
ln: /sys/sys/osreldate.h: File exists
Patching ip6_input.c and ip6_output.c
cat: FreeBSD-4.0/ipv6-patch-5.3: No such file or directory
Hmm... I can't seem to find a patch in there anywhere.
Kernel configuration to update [GENERIC]
IPFilter already configured in kernel config file
===================
Using either kinstall produces the following fatal errors during a
kernel rebuild, specifically, make depend:
==========================
make -V CFILES -V SYSTEM_CFILES -V GEN_CFILES | MKDEP_CPP="cc -E"
CC="cc" xargs mkdep -a -f .newdep -O -pipe -Wall -Wredundant-decls
-Wnested-externs -Wstrict-prototypes -Wmissing-prototypes
-Wpointer-arith -Winline -Wcast-qual -fformat-extensions -std=c99
-nostdinc -I- -I. -I../../.. -I../../../contrib/dev/acpica
-I../../../contrib/altq -I../../../contrib/ipfilter
-I../../../contrib/pf -I../../../contrib/dev/ath
-I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm -D_KERNEL
-include opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param large-function-growth=1000
-mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding
../../../contrib/ipfilter/netinet/ip_auth.c:307:21: macro "WAKEUP"
requires 2 arguments, but only 1 given
../../../contrib/ipfilter/netinet/ip_nat.c:1538:51: macro "MUTEX_INIT"
passed 3 arguments, but takes just 2
../../../contrib/ipfilter/netinet/ip_state.c:546:50: macro "MUTEX_INIT"
passed 3 arguments, but takes just 2
=========================
**
***
****
Peter A. Sygula
President/Chief Security Officer - NetShapers, Inc.
< http://www.net-shapers.com >
