Re: Please backout recent ipfilter changes.

2002-03-19 Thread Mark Murray

 The recent changes to ipfilter break world.  Can
 someone back out the changes?

Better; please post the errors that you are seeing so that this can
be fixed.

M
-- 
o   Mark Murray
\_
O.\_Warning: this .sig is umop ap!sdn

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Please backout recent ipfilter changes.

2002-03-19 Thread Steve Kargl

On Tue, Mar 19, 2002 at 11:06:18PM +, Mark Murray wrote:
  The recent changes to ipfilter break world.  Can
  someone back out the changes?
 
 Better; please post the errors that you are seeing so that this can
 be fixed.
 

I already posted a fix for ipfstat.  ipmon and ipnat are
broken.  What would appear to be the obvious fix for ipnat
doesn't work.  It is clear that Darren did not try to build
ipfilter after his changes.

-- 
Steve

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Please backout recent ipfilter changes.

2002-03-19 Thread Mark Murray

  Better; please post the errors that you are seeing so that this can
  be fixed.
  
 
 I already posted a fix for ipfstat.  ipmon and ipnat are
 broken.  What would appear to be the obvious fix for ipnat
 doesn't work.  It is clear that Darren did not try to build
 ipfilter after his changes.

Post the _errors_. :-)

M
-- 
o   Mark Murray
\_
O.\_Warning: this .sig is umop ap!sdn

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Please backout recent ipfilter changes.

2002-03-19 Thread Michael D. Harnois

On Tue, 2002-03-19 at 17:18, Mark Murray wrote:
 Post the _errors_. :-)

cc -pipe -march=pentiumpro -DUSE_INET6 -DIPL_NAME=\/dev/ipl\
-I/usr/src/sbin/ipnat/../../sys/contrib/ipfilter/netinet
-I/usr/src/sbin/ipnat/../../contrib/ipfilter -static -o ipnat
ipnat.o kmem.o natparse.o common.o  -lkvm
ipnat.o: In function `dostats':
ipnat.o(.text+0x671): undefined reference to `printnat'
ipnat.o(.text+0x733): undefined reference to `printactivenat'
ipnat.o: In function `showhostmap':
ipnat.o(.text+0x858): undefined reference to `printhostmap'
natparse.o: In function `natparsefile':
natparse.o(.text+0x1d02): undefined reference to `printnat'


 
-- 
Michael D. Harnois   bilocational bivocational
Pastor, Redeemer Lutheran ChurchWashburn, Iowa
1L, UST School of Law   Minneapolis, Minnesota
 A man is a success if he gets up in the morning and gets to bed at
night,
 and in between he does what he wants to do. -- Bob Dylan


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Please backout recent ipfilter changes.

2002-03-19 Thread Steve Kargl

On Tue, Mar 19, 2002 at 05:36:16PM -0600, Michael D. Harnois wrote:
 On Tue, 2002-03-19 at 17:18, Mark Murray wrote:
  Post the _errors_. :-)

I'm in the middle of buildworld.

 
 cc -pipe -march=pentiumpro -DUSE_INET6 -DIPL_NAME=\/dev/ipl\
 -I/usr/src/sbin/ipnat/../../sys/contrib/ipfilter/netinet
 -I/usr/src/sbin/ipnat/../../contrib/ipfilter -static -o ipnat
 ipnat.o kmem.o natparse.o common.o  -lkvm
 ipnat.o: In function `dostats':
 ipnat.o(.text+0x671): undefined reference to `printnat'
 ipnat.o(.text+0x733): undefined reference to `printactivenat'
 ipnat.o: In function `showhostmap':
 ipnat.o(.text+0x858): undefined reference to `printhostmap'
 natparse.o: In function `natparsefile':
 natparse.o(.text+0x1d02): undefined reference to `printnat'
 
 

This is one of the problems.  The obvious fix is to
add printnat.c to SRCS in the Makefile.  This doesn't
work because of a reference to a member of structure
which doesn't exist.

-- 
Steve

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Please backout recent ipfilter changes.

2002-03-19 Thread Steve Kargl

On Tue, Mar 19, 2002 at 11:18:15PM +, Mark Murray wrote:
   Better; please post the errors that you are seeing so that this can
   be fixed.
   
  
  I already posted a fix for ipfstat.  ipmon and ipnat are
  broken.  What would appear to be the obvious fix for ipnat
  doesn't work.  It is clear that Darren did not try to build
  ipfilter after his changes.
 
 Post the _errors_. :-)
 

Oh yeah, I forgot ipftest is broken, too.

-- 
Steve

=== usr.sbin/ipftest
rm -f .depend
CC=cc mkdep -f .depend -a-DUSE_INET6 -DIPL_NAME=\/dev/ipl\ 
-I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet 
-I/usr/src/usr.sbin/ipftest/../../contrib/ipfilter  
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipt.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/parse.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_sn.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_ef.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_td.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_pc.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/opt.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_tx.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/misc.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_frag.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_state.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_nat.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_proxy.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_auth.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_hx.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_fil.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/natparse.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/facpri.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/common.c
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_proxy.c:102: 
netinet/ip_ipsec_pxy.c: No such file or directory
mkdep: compile failed
*** Error code 1

Stop in /usr/src/usr.sbin/ipftest.
*** Error code 1


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Please backout recent ipfilter changes.

2002-03-19 Thread Steve Kargl

On Tue, Mar 19, 2002 at 03:44:15PM -0800, Steve Kargl wrote:
 On Tue, Mar 19, 2002 at 11:18:15PM +, Mark Murray wrote:
  
  Post the _errors_. :-)
  
 
 Oh yeah, I forgot ipftest is broken, too.
 
 
 === usr.sbin/ipftest
 rm -f .depend
 CC=cc mkdep -f .depend -a-DUSE_INET6 -DIPL_NAME=\/dev/ipl\ 
-I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet 
-I/usr/src/usr.sbin/ipftest/../../contrib/ipfilter  
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipt.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/parse.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_sn.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_ef.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_td.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_pc.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/opt.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_tx.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/misc.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_frag.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_state.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_nat.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_proxy.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_auth.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipft_hx.c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_fil.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/natparse.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/facpri.c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/common.c
 /usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/ip_proxy.c:102: 
netinet/ip_ipsec_pxy.c: No such file or directory
 mkdep: compile failed
 *** Error code 1
 
 Stop in /usr/src/usr.sbin/ipftest.
 *** Error code 1
 
 

This patch fixes the make depend stage

--- /usr/src/sys/contrib/ipfilter/netinet/ip_proxy.c.orig   Tue Mar 19 15:56:46 
2002
+++ /usr/src/sys/contrib/ipfilter/netinet/ip_proxy.cTue Mar 19 15:57:35 2002
@@ -99,7 +99,7 @@
 #include netinet/ip_raudio_pxy.c
 #include netinet/ip_netbios_pxy.c
 #endif
-#include netinet/ip_ipsec_pxy.c
+#include ip_ipsec_pxy.c
 
 ap_session_t   *ap_sess_tab[AP_SESS_SIZE];
 ap_session_t   *ap_sess_list = NULL;

This then leads to

root[441] make
cc -O -pipe  -DUSE_INET6 -DIPL_NAME=\/dev/ipl\ 
-I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet 
-I/usr/src/usr.sbin/ipftest/../../contrib/ipfilter-c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/ipt.c
cc -O -pipe  -DUSE_INET6 -DIPL_NAME=\/dev/ipl\ 
-I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet 
-I/usr/src/usr.sbin/ipftest/../../contrib/ipfilter-c 
/usr/src/usr.sbin/ipftest/../../contrib/ipfilter/parse.c
cc -O -pipe  -DUSE_INET6 -DIPL_NAME=\/dev/ipl\ 
-I/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet 
-I/usr/src/usr.sbin/ipftest/../../contrib/ipfilter-c 
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c: In function 
`fr_makefrip':
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c:287: `ICMP6_MINLEN' 
undeclared (first use in this function)
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c:287: (Each 
undeclared identifier is reported only once
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c:287: for each 
function it appears in.)
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c: In function 
`fr_check':
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c:1101: too many 
arguments to function `fr_addstate'
/usr/src/usr.sbin/ipftest/../../sys/contrib/ipfilter/netinet/fil.c:1222: warning: 
passing arg 2 of `send_reset' from incompatible pointer type
*** Error code 1

-- 
Steve

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message