Ipfilter broken on -current

2003-10-04 Thread Udo Schweigert
Hi all, since a couple of days ipfilter is broken for -current. kldload ipl.ko gives: link_elf: symbol pfil_head_get undefined And the IPFILTER option inside the kernel-config results in: cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes

Re: Ipfilter broken on -current

2003-10-04 Thread Arjan van Leeuwen
On Saturday 04 October 2003 11:21, Udo Schweigert wrote: Hi all, since a couple of days ipfilter is broken for -current. kldload ipl.ko gives: link_elf: symbol pfil_head_get undefined And the IPFILTER option inside the kernel-config results in: (snip) You should read /usr/src/UPDATING.

Re: Ipfilter broken on -current

2003-10-04 Thread Udo Schweigert
On Sat, Oct 04, 2003 at 13:01:31 +0200, Arjan van Leeuwen wrote: On Saturday 04 October 2003 11:21, Udo Schweigert wrote: Hi all, since a couple of days ipfilter is broken for -current. kldload ipl.ko gives: link_elf: symbol pfil_head_get undefined And the IPFILTER option inside the

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread Daniel C. Sobral
leafy wrote: With IPFILTER enabled in the kernel, all socket(2) calls inbound/outbound are very slow. A normal SSH connection within the same subnet takes 5 minutes to connect. Anything I can provide to pin down the problem? Are you sure _all_ socket calls are slow? 5.0-R had reverse

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution for sshd (which happened no matter what the configuration said) run All, including ssh. Only ICMP responds in time. connection arrives). If blackhole or

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 11:22:29PM +0800, leafy wrote: On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution for sshd (which happened no matter what the configuration said) run All, including ssh. Only ICMP

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread Terry Lambert
leafy wrote: On Thu, Mar 06, 2003 at 11:22:29PM +0800, leafy wrote: On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution for sshd (which happened no matter what the configuration said) run All, including

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 09:00:22AM -0800, Terry Lambert wrote: I noticed that port 53 UDP (yes, UDP) gets through fine, though. Try disabling delayed ACK in the TCP stack; it's a sysctl. -- Terry Been there, done that. No difference though. Jiawei -- Without the userland, the kernel

IPFILTER broken as of world/kernel a few hours old

2003-03-04 Thread leafy
With IPFILTER enabled in the kernel, all socket(2) calls inbound/outbound are very slow. A normal SSH connection within the same subnet takes 5 minutes to connect. Anything I can provide to pin down the problem? Jiawei -- Without the userland, the kernel is useless.

Re: ipfilter broken?

2001-02-13 Thread David O'Brien
On Tue, Feb 13, 2001 at 04:00:26PM +0800, Donny Lee wrote: Dag-Erling Smorgrav wrote: ===ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Looks like a stale dependency file to me. Try 'make cleandir' twice, followed by the usual 'make depend make

Re: ipfilter broken?

2001-02-13 Thread David O'Brien
On Tue, Feb 13, 2001 at 05:18:04AM +0100, Dag-Erling Smorgrav wrote: Donny Lee [EMAIL PROTECTED] writes: ===ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Looks like a stale dependency file to me. Try 'make cleandir' twice, That only works in /usr/src

Re: ipfilter broken?

2001-02-13 Thread Dag-Erling Smorgrav
"David O'Brien" [EMAIL PROTECTED] writes: On Tue, Feb 13, 2001 at 05:18:04AM +0100, Dag-Erling Smorgrav wrote: Donny Lee [EMAIL PROTECTED] writes: ===ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Looks like a stale dependency file to me. Try 'make

Re: ipfilter broken?

2001-02-13 Thread David O'Brien
On Tue, Feb 13, 2001 at 11:15:24AM +0100, Dag-Erling Smorgrav wrote: "David O'Brien" [EMAIL PROTECTED] writes: On Tue, Feb 13, 2001 at 05:18:04AM +0100, Dag-Erling Smorgrav wrote: Donny Lee [EMAIL PROTECTED] writes: ===ipfilter make: don't know how to make machine/lock.h Stop.

Re: ipfilter broken?

2001-02-13 Thread Donny Lee
David O'Brien wrote: Looks like a stale dependency file to me. Try 'make cleandir' twice, followed by the usual 'make depend make make install'. Yes, but got no luck, stops at the same place.:) cd /sys/compile/YOURKERNELFILE rm -rf modules make depend make thanks, it

Re: ipfilter broken?

2001-02-13 Thread Dag-Erling Smorgrav
Donny Lee [EMAIL PROTECTED] writes: By doing so, I also noticed that, the general procedule i used to take: cd /sys/i386/conf config -r mykernel ^^ No point. cd ../../compile/mykernel make depend all install ^^ Wrong. It

Re: ipfilter broken?

2001-02-13 Thread Donny Lee
Dag-Erling Smorgrav wrote: By doing so, I also noticed that, the general procedule i used to take: cd /sys/i386/conf config -r mykernel ^^ No point. -r removes objects generated by a previous kernel config, i guess. cd ../../compile/mykernel

Re: ipfilter broken?

2001-02-13 Thread Dag-Erling Smorgrav
Donny Lee [EMAIL PROTECTED] writes: Dag-Erling Smorgrav wrote: config -r mykernel No point. -r removes objects generated by a previous kernel config, i guess. Still no point. Unless your tree is hosed, make(1) takes care of that, as long as you don't screw up by running all three

ipfilter broken?

2001-02-12 Thread Donny Lee
Hi there, I'm not sure if this related to the thread of -current these days. my world builds fine with the latest cvsup, maybe only 1 or 2 hrs ago. no more luck, my kernel building stoped here: ===ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Stop in

Re: ipfilter broken?

2001-02-12 Thread Dag-Erling Smorgrav
Donny Lee [EMAIL PROTECTED] writes: ===ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Looks like a stale dependency file to me. Try 'make cleandir' twice, followed by the usual 'make depend make make install'. DES -- Dag-Erling Smorgrav - [EMAIL

Re: ipfilter broken?

2001-02-12 Thread Donny Lee
Dag-Erling Smorgrav wrote: ===ipfilter make: don't know how to make machine/lock.h Stop. *** Error code 2 Looks like a stale dependency file to me. Try 'make cleandir' twice, followed by the usual 'make depend make make install'. Yes, but got no luck, stops at the same place.