Hello,
I'm trying to configure IPFILTER in 5.2-Release. But the compilation
failes:
cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs
-Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual
-fformat-extensions -std=c99 -nostdinc -I- -I. -I../../..
-I../../../contrib/dev/acpica -I../../../contrib/ipfilter
-I../../../contrib/dev/ath -I../../../contrib/dev/ath/freebsd
-I../../../contrib/ngatm -D_KERNEL -include opt_global.h -fno-common
-finline-limit=15000 -fno-strict-aliasing -mno-align-long-strings
-mpreferred-stack-boundary=2 -ffreestanding -Werror
../../../contrib/ipfilter/netinet/ip_fil.c
../../../contrib/ipfilter/netinet/ip_fil.c: In function `fr_check_wrapper':
../../../contrib/ipfilter/netinet/ip_fil.c:319: error: `PFIL_OUT' undeclared
(first use in this function)
I've copied the oppropriate options from /sys/conf/NOTES.
How is IPFILTER built?
-Hanspeter
-------------- next part --------------
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
#
http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ../../conf/NOTES and NOTES files.
# If you are in doubt as to the purpose or necessity of a line, check first
# in NOTES.
#
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.394.2.2 2003/12/07 23:52:53 scottl Exp
$
machine i386
#pu I486_CPU
#pu I586_CPU
cpu I686_CPU
ident F5
#To statically compile in device wiring instead of /boot/device.hints
#hints "GENERIC.hints" #Default places to look for devices.
#makeoptions DEBUG=-g #Build kernel with gdb(1) debug symbols
options SCHED_4BSD #4BSD scheduler
options INET #InterNETworking
#ptions INET6 #IPv6 communications protocols
options FFS #Berkeley Fast Filesystem
options SOFTUPDATES #Enable FFS soft updates support
options UFS_ACL #Support for access control lists
options UFS_DIRHASH #Improve performance on big directories
options MD_ROOT #MD is a potential root device
options NFSCLIENT #Network Filesystem Client
options NFSSERVER #Network Filesystem Server
options NFS_ROOT #NFS usable as /, requires NFSCLIENT
options MSDOSFS #MSDOS Filesystem
options CD9660 #ISO 9660 Filesystem
options PROCFS #Process filesystem (requires PSEUDOFS)
options PSEUDOFS #Pseudo-filesystem framework
options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 #Compatible with FreeBSD4
options SCSI_DELAY=15000 #Delay (in ms) before probing SCSI
options KTRACE #ktrace(1) support
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time extensions
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options AHC_REG_PRETTY_PRINT # Print register bitfields in debug
# output. Adds ~128k to driver.
options AHD_REG_PRETTY_PRINT # Print register bitfields in debug
# output. Adds ~215k to driver.
# Debugging for use in -current
#options DDB #Enable the kernel debugger
#options INVARIANTS #Enable calls of extra sanity checking
options INVARIANT_SUPPORT #Extra sanity checks of internal structures, required
by INVARIANTS
#options WITNESS #Enable checks to detect deadlocks and cycles
#options WITNESS_SKIPSPIN #Don't run witness on spinlocks for speed
# To make an SMP kernel, the next two are needed
#ptions SMP # Symmetric MultiProcessor Kernel
device apic # I/O APIC
device isa
device eisa
device pci
# Floppy drives
device fdc
# ATA and ATAPI devices
device ata
device atadisk # ATA disk drives
#evice ataraid # ATA RAID drives
device atapicd # ATAPI CDROM drives
#evice atapifd # ATAPI floppy drives
#evice atapist # ATAPI tape drives
options ATA_STATIC_ID #Static device numbering
# SCSI Controllers
#evice ahb # EISA AHA1742 family
#evice ahc # AHA2940 and onboard AIC7xxx devices
#evice ahd # AHA39320/29320 and onboard AIC79xx devices
#evice amd # AMD 53C974 (Tekram DC-390(T))
#evice isp # Qlogic family
#evice mpt # LSI-Logic MPT-Fusion
#device ncr # NCR/Symbios Logic
#evice sym # NCR/Symbios Logic (newer chipsets + those of `ncr')
#evice trm # Tekram DC395U/UW/F DC315U adapters
#evice adv # Advansys SCSI adapters
#evice adw # Advansys wide SCSI adapters
#evice aha # Adaptec 154x SCSI adapters
#evice aic # Adaptec 15[012]x SCSI adapters, AIC-6[23]60.
#evice bt # Buslogic/Mylex MultiMaster SCSI adapters
#evice ncv # NCR 53C500
#evice nsp # Workbit Ninja SCSI-3
#evice stg # TMC 18C30/18C50
# SCSI peripherals
device scbus # SCSI bus (required for SCSI)
#evice ch # SCSI media changers
#evice da # Direct Access (disks)
#evice sa # Sequential Access (tape etc)
device cd # CD
device pass # Passthrough device (direct SCSI access)
device ses # SCSI Environmental Services (and SAF-TE)
# RAID controllers interfaced to the SCSI subsystem
#evice amr # AMI MegaRAID
#evice asr # DPT SmartRAID V, VI and Adaptec SCSI RAID
#evice ciss # Compaq Smart RAID 5*
#evice dpt # DPT Smartcache III, IV - See NOTES for options
#evice iir # Intel Integrated RAID
#evice ips # IBM (Adaptec) ServeRAID
#evice mly # Mylex AcceleRAID/eXtremeRAID
# RAID controllers
#evice aac # Adaptec FSA RAID
#evice aacp # SCSI passthrough for aac (requires CAM)
#evice ida # Compaq Smart RAID
#evice mlx # Mylex DAC960 family
#evice pst # Promise Supertrak SX6000
#evice twe # 3ware ATA RAID
# atkbdc0 controls both the keyboard and the PS/2 mouse
device atkbdc # AT keyboard controller
device atkbd # AT keyboard
device psm # PS/2 mouse
device vga # VGA video card driver
device splash # Splash screen and screen saver support
# syscons is the default console driver, resembling an SCO console
device sc
# Enable this for the pcvt (VT220 compatible) console driver
#device vt
#options XSERVER # support for X server on a vt console
#options FAT_CURSOR # start with block cursor
device agp # support several AGP chipsets
# Floating point support - do not disable.
device npx
# Power management support (see NOTES for more options)
#device apm
# Add suspend/resume support for the i8254.
device pmtimer
# PCCARD (PCMCIA) support
# Pcmcia and cardbus bridge support
device cbb # cardbus (yenta) bridge
#device pcic # ExCA ISA and PCI bridges
device pccard # PC Card (16-bit) bus
device cardbus # CardBus (32-bit) bus
# Serial (COM) ports
device sio # 8250, 16[45]50 based serial ports
# Parallel port
device ppc
device ppbus # Parallel port bus (required)
device lpt # Printer
device plip # TCP/IP over parallel
device ppi # Parallel port interface device
#device vpo # Requires scbus and da
# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to the sio and/or ppc drivers):
#device puc
# PCI Ethernet NICs.
#evice de # DEC/Intel DC21x4x (``Tulip'')
#evice em # Intel PRO/1000 adapter Gigabit Ethernet Card
#evice txp # 3Com 3cR990 (``Typhoon'')
#evice vx # 3Com 3c590, 3c595 (``Vortex'')
# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these
NICs!
device miibus # MII bus support
#evice bfe # Broadcom BCM440x 10/100 ethernet
#evice bge # Broadcom BCM570xx Gigabit Ethernet
#evice dc # DEC/Intel 21143 and various workalikes
#evice fxp # Intel EtherExpress PRO/100B (82557, 82558)
#evice pcn # AMD Am79C97x PCI 10/100 (precedence over 'lnc')
device re # RealTek 8139C+/8169/8169S/8110S
device rl # RealTek 8129/8139
#evice sf # Adaptec AIC-6915 (``Starfire'')
#evice sis # Silicon Integrated Systems SiS 900/SiS 7016
#evice sk # SysKonnect SK-984x and SK-982x gigabit ethernet
#evice ste # Sundance ST201 (D-Link DFE-550TX)
#evice ti # Alteon Networks Tigon I/II gigabit ethernet
#evice tl # Texas Instruments ThunderLAN
#evice tx # SMC EtherPower II (83c170 ``EPIC'')
#evice vr # VIA Rhine, Rhine II
#evice wb # Winbond W89C840F
#evice xl # 3Com 3c90x (``Boomerang'', ``Cyclone'')
# ISA Ethernet NICs. pccard nics included.
#evice cs # Crystal Semiconductor CS89x0 NIC
# 'device ed' requires 'device miibus'
#evice ed # NE[12]000, SMC Ultra, 3c503, DS8390 cards
#evice ex # Intel EtherExpress Pro/10 and Pro/10+
#evice ep # Etherlink III based cards
#evice fe # Fujitsu MB8696x based cards
#evice ie # EtherExpress 8/16, 3C507, StarLAN 10 etc.
#evice lnc # NE2100, NE32-VL Lance Ethernet cards
#evice sn # SMC's 9000 series of ethernet chips
#evice xe # Xircom pccard ethernet
# ISA devices that use the old ISA shims
#device le
# Wireless NIC cards
#evice wlan # 802.11 support
#evice an # Aironet 4500/4800 802.11 wireless NICs.
#evice awi # BayStack 660 and others
#evice wi # WaveLAN/Intersil/Symbol 802.11 wireless NICs.
#device wl # Older non 802.11 Wavelan wireless NIC.
# Pseudo devices - the number indicates how many units to allocate.
device random # Entropy device
device loop # Network loopback
device ether # Ethernet support
device sl # Kernel SLIP
device ppp # Kernel PPP
device tun # Packet tunnel.
device pty # Pseudo-ttys (telnet etc)
device md # Memory "disks"
device gif # IPv6 and IPv4 tunneling
device faith # IPv6-to-IPv4 relaying (translation)
# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
device bpf # Berkeley packet filter
# USB support
device uhci # UHCI PCI->USB interface
#evice ohci # OHCI PCI->USB interface
device usb # USB Bus (required)
#device udbp # USB Double Bulk Pipe devices
device ugen # Generic
device uhid # "Human Interface Devices"
device ukbd # Keyboard
device ulpt # Printer
device umass # Disks/Mass storage - Requires scbus and da
device ums # Mouse
#evice urio # Diamond Rio 500 MP3 player
device uscanner # Scanners
# USB Ethernet, requires mii
#evice aue # ADMtek USB ethernet
#evice axe # ASIX Electronics USB ethernet
#evice cue # CATC USB ethernet
#evice kue # Kawasaki LSI USB ethernet
# FireWire support
device firewire # FireWire bus code
device sbp # SCSI over FireWire (Requires scbus and da)
device fwe # Ethernet over FireWire (non-standard!)
device pcm
options IPFILTER #ipfilter support
options IPFILTER_LOG #ipfilter logging
options IPFILTER_DEFAULT_BLOCK #block all packets by default