Hi Darren, I notice that you have updated ipfilter 4.1.32 for compilation Solaris U7:
Revision 1.2.2.14 - (download) (annotate) Sat Jun 6 18:08:35 2009 UTC (2 weeks ago) by darren_r Branch: v4-1-RELEASE CVS Tags: v4-1-32 Changes since 1.2.2.13: +19 -16 lines 2790920 Solaris U7 breaks ipfilter compilation So I pull v4-1-32 from CVS, and give it a try. The new revision does fix the compilation problem. It compiles on Solaris U7. My test box is: Release: 5.10 Kernel architecture: sun4u Application architecture: sparc Hardware provider: Sun_Microsystems Domain: Kernel version: SunOS 5.10 Generic_141414-01 however, there are two missing symbols when I try to start ipf: Jun 20 17:02:57 bettina unix: [ID 472681 kern.notice] WARNING: mod_load: cannot load module 'ipf' Jun 20 17:03:28 bettina unix: [ID 819705 kern.notice] /usr/kernel/drv/sparcv9/ipf: undefined symbol Jun 20 17:03:28 bettina unix: [ID 826211 kern.notice] 'hook_alloc' Jun 20 17:03:28 bettina unix: [ID 819705 kern.notice] /usr/kernel/drv/sparcv9/ipf: undefined symbol Jun 20 17:03:28 bettina unix: [ID 826211 kern.notice] 'net_release' Jun 20 17:03:28 bettina unix: [ID 472681 kern.notice] WARNING: mod_load: cannot load module 'ipf' *sigh*.. Yours, -- Sum > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Please report this as a bug at: > https://sourceforge.net/tracker/?func=add&group_id=169098&atid=849053 > > Darren > > Summum Bonum wrote: > | Hi Darren, > | > | I have patched our Solaris 10 servers to 5/09 release with latest > | kernel 139555-08. The newly patched /usr/include/sys/neti.h does not > | seem to have net_data_t defined anymore, and is causing problem with > | ipFilter's ip_compat.h: > | > | gcc -I. -g -I../.. -D_BSD_SOURCE -DSOLARIS2=10 -DIPFILTER_LOG > | -DIPFILTER_LOOKUP -DIPFILTER_SCAN -DIPFILTER_SYNC -DIPFILTER_CKSUM -c > | sparcv7/ip_rules.c -o sparcv7/ip_rules_u.o > | gcc -I. -I../.. -DIPFILTER_LKM -I../../../pfil -D_KERNEL -DSUNDDI > | -DSOLARIS2=10 -DIPFILTER_LOG -DIPFILTER_LOOKUP -DIPFILTER_SCAN -c > | ./../bpf_filter.c -o sparcv7/bpf_filter_u.o > | In file included from ../../bpf_filter.c:54: > | ./../netinet/ip_compat.h:228: error: expected '=', ',', ';', 'asm' or > | '__attribute__' before 'ipfipv4' > | ./../netinet/ip_compat.h:229: error: expected '=', ',', ';', 'asm' or > | '__attribute__' before 'ipfipv6' > | *** Error code 1 > | make: Fatal error: Command failed for target `sparcv7/bpf_filter_u.o' > | Current working directory /tmp/x/ip_fil4.1.32_RC5/SunOS5/sparc-5.10 > | *** Error code 1 > | make: Fatal error: Command failed for target `sunos5' > | Current working directory /tmp/x/ip_fil4.1.32_RC5 > | *** Error code 1 > | make: Fatal error: Command failed for target `solaris' > | > | IPFilter 4.1.31, 4.1.32R5 and 5.0.6 will not compile on it now. > | > | Existing ipFilter 4.1.31 that we compiled from source will not work > | either, because of missing symbol. *sigh* so sad.... > | > | Yours, > | > | -00- Sum > | > | > > | The (hopefully last) release candidate for 4.1.32 corrects some > | problems with building for FreeBSD on AMD64. > | > | http://downloads.sourceforge.net/ipfilter/ip_fil4.1.32rc5.tar.gz > | MD5 (ip_fil4.1.32rc5.tar.gz) = 0e4f6d38ab66a67c403b3629e2c9a607 > | > | IPFilter 5.0.6 brings along being able to define limits on how > | many connections a host or subnet may own for each rule that > | uses stateful filtering. I've rewritten the man page for ipf.conf, > | ipf.5, and have included that in this email. This is still lightly > | tested and should be considered experimental. > | > | NOTE: the new man page for ipf.conf(5) is too big to work as an > | attachment to this email ;( so you can find it here: > | http://coombs.anu.edu.au/~avalon/ipf.new.txt > | > | http://downloads.sourceforge.net/ipfilter/ip_fil5.0.6.tar.gz > | MD5 (ip_fil5.0.6.tar.gz) = fe9a02b851290013594f9cb403f8f1ff > | > | Cheers, > | Darren > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkoJ6cgACgkQP7JIXtvLbFXHdgCgirfIGKP4FW0fVpZP03NSf5iO > lLEAoMbsvnPhzbAypjtdqTM6RNe+KXAM > =i8Xs > -----END PGP SIGNATURE----- >
