compile failed on IPFilter 4.1.32 RC5 & 5.0.6 after 139555 kernel patch

"Summum Bonum" <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <5405_1242004638_4A077C9E_5405_493_1_200905110114.n4B1Ea5U022040@bettina.wella.org>
Hi Darren,

I have patched our Solaris 10 servers to 5/09 release with latest
kernel 139555-08.  The newly patched /usr/include/sys/neti.h does not
seem to have net_data_t defined anymore, and is causing problem with
ipFilter's ip_compat.h:

gcc -I. -g -I../.. -D_BSD_SOURCE  -DSOLARIS2=10 -DIPFILTER_LOG
-DIPFILTER_LOOKUP  -DIPFILTER_SCAN -DIPFILTER_SYNC -DIPFILTER_CKSUM -c
sparcv7/ip_rules.c -o sparcv7/ip_rules_u.o
gcc -I. -I../.. -DIPFILTER_LKM -I../../../pfil -D_KERNEL -DSUNDDI
-DSOLARIS2=10 -DIPFILTER_LOG -DIPFILTER_LOOKUP -DIPFILTER_SCAN  -c
./../bpf_filter.c -o sparcv7/bpf_filter_u.o
In file included from ../../bpf_filter.c:54:
./../netinet/ip_compat.h:228: error: expected '=', ',', ';', 'asm' or
'__attribute__' before 'ipfipv4'
./../netinet/ip_compat.h:229: error: expected '=', ',', ';', 'asm' or
'__attribute__' before 'ipfipv6'
*** Error code 1
make: Fatal error: Command failed for target `sparcv7/bpf_filter_u.o'
Current working directory /tmp/x/ip_fil4.1.32_RC5/SunOS5/sparc-5.10
*** Error code 1
make: Fatal error: Command failed for target `sunos5'
Current working directory /tmp/x/ip_fil4.1.32_RC5
*** Error code 1
make: Fatal error: Command failed for target `solaris'

IPFilter 4.1.31, 4.1.32R5 and 5.0.6 will not compile on it now.

Existing ipFilter 4.1.31 that we compiled from source will not work
either, because of missing symbol. *sigh* so sad....

Yours,

-00- Sum

> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>  
> The (hopefully last) release candidate for 4.1.32 corrects some
> problems with building for FreeBSD on AMD64.
> 
> http://downloads.sourceforge.net/ipfilter/ip_fil4.1.32rc5.tar.gz
> MD5 (ip_fil4.1.32rc5.tar.gz) = 0e4f6d38ab66a67c403b3629e2c9a607
> 
> IPFilter 5.0.6 brings along being able to define limits on how
> many connections a host or subnet may own for each rule that
> uses stateful filtering. I've rewritten the man page for ipf.conf,
> ipf.5, and have included that in this email. This is still lightly
> tested and should be considered experimental.
> 
> NOTE: the new man page for ipf.conf(5) is too big to work as an
> attachment to this email ;( so you can find it here:
> http://coombs.anu.edu.au/~avalon/ipf.new.txt
> 
> http://downloads.sourceforge.net/ipfilter/ip_fil5.0.6.tar.gz
> MD5 (ip_fil5.0.6.tar.gz) = fe9a02b851290013594f9cb403f8f1ff
> 
> Cheers,
> Darren
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>  
> iEYEARECAAYFAknGDVwACgkQP7JIXtvLbFUULwCg7/Kw8fKdC9mxaDWfVFJHmc6J
> bSEAoJiRp6f9gywE/zsMmIZ3JMfrzbQz
> =bwPb
> -----END PGP SIGNATURE-----
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.