Re: compile failed on IPFilter 4.1.32 RC5 & 5.0.6 after 139555 kernel patch

Darren Reed <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <26240_1242163842_4A09EA82_26240_124_1_4A09E9C8.9030303@reed.wattle.id.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Please report this as a bug at:
https://sourceforge.net/tracker/?func=add&group_id=169098&atid=849053

Darren

Summum Bonum wrote:
| Hi Darren,
|
| I have patched our Solaris 10 servers to 5/09 release with latest
| kernel 139555-08.  The newly patched /usr/include/sys/neti.h does not
| seem to have net_data_t defined anymore, and is causing problem with
| ipFilter's ip_compat.h:
|
| gcc -I. -g -I../.. -D_BSD_SOURCE  -DSOLARIS2=10 -DIPFILTER_LOG
| -DIPFILTER_LOOKUP  -DIPFILTER_SCAN -DIPFILTER_SYNC -DIPFILTER_CKSUM -c
| sparcv7/ip_rules.c -o sparcv7/ip_rules_u.o
| gcc -I. -I../.. -DIPFILTER_LKM -I../../../pfil -D_KERNEL -DSUNDDI
| -DSOLARIS2=10 -DIPFILTER_LOG -DIPFILTER_LOOKUP -DIPFILTER_SCAN  -c
| ./../bpf_filter.c -o sparcv7/bpf_filter_u.o
| In file included from ../../bpf_filter.c:54:
| ./../netinet/ip_compat.h:228: error: expected '=', ',', ';', 'asm' or
| '__attribute__' before 'ipfipv4'
| ./../netinet/ip_compat.h:229: error: expected '=', ',', ';', 'asm' or
| '__attribute__' before 'ipfipv6'
| *** Error code 1
| make: Fatal error: Command failed for target `sparcv7/bpf_filter_u.o'
| Current working directory /tmp/x/ip_fil4.1.32_RC5/SunOS5/sparc-5.10
| *** Error code 1
| make: Fatal error: Command failed for target `sunos5'
| Current working directory /tmp/x/ip_fil4.1.32_RC5
| *** Error code 1
| make: Fatal error: Command failed for target `solaris'
|
| IPFilter 4.1.31, 4.1.32R5 and 5.0.6 will not compile on it now.
|
| Existing ipFilter 4.1.31 that we compiled from source will not work
| either, because of missing symbol. *sigh* so sad....
|
| Yours,
|
| -00- Sum
|
| >
| The (hopefully last) release candidate for 4.1.32 corrects some
| problems with building for FreeBSD on AMD64.
|
| http://downloads.sourceforge.net/ipfilter/ip_fil4.1.32rc5.tar.gz
| MD5 (ip_fil4.1.32rc5.tar.gz) = 0e4f6d38ab66a67c403b3629e2c9a607
|
| IPFilter 5.0.6 brings along being able to define limits on how
| many connections a host or subnet may own for each rule that
| uses stateful filtering. I've rewritten the man page for ipf.conf,
| ipf.5, and have included that in this email. This is still lightly
| tested and should be considered experimental.
|
| NOTE: the new man page for ipf.conf(5) is too big to work as an
| attachment to this email ;( so you can find it here:
| http://coombs.anu.edu.au/~avalon/ipf.new.txt
|
| http://downloads.sourceforge.net/ipfilter/ip_fil5.0.6.tar.gz
| MD5 (ip_fil5.0.6.tar.gz) = fe9a02b851290013594f9cb403f8f1ff
|
| Cheers,
| Darren
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkoJ6cgACgkQP7JIXtvLbFXHdgCgirfIGKP4FW0fVpZP03NSf5iO
lLEAoMbsvnPhzbAypjtdqTM6RNe+KXAM
=i8Xs
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.