Re: compile failed on IPFilter 4.1.32 RC5 & 5.0.6 after 139555 kernel

Hi Darren,

I notice that you have updated ipfilter 4.1.32 for compilation Solaris U7:

Revision 1.2.2.14 - (download) (annotate)
Sat Jun 6 18:08:35 2009 UTC (2 weeks ago) by darren_r
Branch: v4-1-RELEASE
CVS Tags: v4-1-32
Changes since 1.2.2.13: +19 -16 lines

2790920 Solaris U7 breaks ipfilter compilation

So I pull v4-1-32 from CVS, and give it a try. The new revision does fix
the compilation problem. It compiles on Solaris U7. My test box is:

Release: 5.10
Kernel architecture: sun4u
Application architecture: sparc
Hardware provider: Sun_Microsystems
Domain: 
Kernel version: SunOS 5.10 Generic_141414-01

however, there are two missing symbols when I try to start ipf:

Jun 20 17:02:57 bettina unix: [ID 472681 kern.notice] WARNING: mod_load:
cannot load module 'ipf'
Jun 20 17:03:28 bettina unix: [ID 819705 kern.notice]
/usr/kernel/drv/sparcv9/ipf: undefined symbol
Jun 20 17:03:28 bettina unix: [ID 826211 kern.notice]  'hook_alloc'
Jun 20 17:03:28 bettina unix: [ID 819705 kern.notice]
/usr/kernel/drv/sparcv9/ipf: undefined symbol
Jun 20 17:03:28 bettina unix: [ID 826211 kern.notice]  'net_release'
Jun 20 17:03:28 bettina unix: [ID 472681 kern.notice] WARNING: mod_load:
cannot load module 'ipf'

*sigh*..

Yours,

-- Sum




> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>  
> Please report this as a bug at:
> https://sourceforge.net/tracker/?func=add&group_id=169098&atid=849053
> 
> Darren
> 
> Summum Bonum wrote:
> | Hi Darren,
> |
> | I have patched our Solaris 10 servers to 5/09 release with latest
> | kernel 139555-08.  The newly patched /usr/include/sys/neti.h does not
> | seem to have net_data_t defined anymore, and is causing problem with
> | ipFilter's ip_compat.h:
> |
> | gcc -I. -g -I../.. -D_BSD_SOURCE  -DSOLARIS2=10 -DIPFILTER_LOG
> | -DIPFILTER_LOOKUP  -DIPFILTER_SCAN -DIPFILTER_SYNC -DIPFILTER_CKSUM -c
> | sparcv7/ip_rules.c -o sparcv7/ip_rules_u.o
> | gcc -I. -I../.. -DIPFILTER_LKM -I../../../pfil -D_KERNEL -DSUNDDI
> | -DSOLARIS2=10 -DIPFILTER_LOG -DIPFILTER_LOOKUP -DIPFILTER_SCAN  -c
> | ./../bpf_filter.c -o sparcv7/bpf_filter_u.o
> | In file included from ../../bpf_filter.c:54:
> | ./../netinet/ip_compat.h:228: error: expected '=', ',', ';', 'asm' or
> | '__attribute__' before 'ipfipv4'
> | ./../netinet/ip_compat.h:229: error: expected '=', ',', ';', 'asm' or
> | '__attribute__' before 'ipfipv6'
> | *** Error code 1
> | make: Fatal error: Command failed for target `sparcv7/bpf_filter_u.o'
> | Current working directory /tmp/x/ip_fil4.1.32_RC5/SunOS5/sparc-5.10
> | *** Error code 1
> | make: Fatal error: Command failed for target `sunos5'
> | Current working directory /tmp/x/ip_fil4.1.32_RC5
> | *** Error code 1
> | make: Fatal error: Command failed for target `solaris'
> |
> | IPFilter 4.1.31, 4.1.32R5 and 5.0.6 will not compile on it now.
> |
> | Existing ipFilter 4.1.31 that we compiled from source will not work
> | either, because of missing symbol. *sigh* so sad....
> |
> | Yours,
> |
> | -00- Sum
> |
> | >
> | The (hopefully last) release candidate for 4.1.32 corrects some
> | problems with building for FreeBSD on AMD64.
> |
> | http://downloads.sourceforge.net/ipfilter/ip_fil4.1.32rc5.tar.gz
> | MD5 (ip_fil4.1.32rc5.tar.gz) = 0e4f6d38ab66a67c403b3629e2c9a607
> |
> | IPFilter 5.0.6 brings along being able to define limits on how
> | many connections a host or subnet may own for each rule that
> | uses stateful filtering. I've rewritten the man page for ipf.conf,
> | ipf.5, and have included that in this email. This is still lightly
> | tested and should be considered experimental.
> |
> | NOTE: the new man page for ipf.conf(5) is too big to work as an
> | attachment to this email ;( so you can find it here:
> | http://coombs.anu.edu.au/~avalon/ipf.new.txt
> |
> | http://downloads.sourceforge.net/ipfilter/ip_fil5.0.6.tar.gz
> | MD5 (ip_fil5.0.6.tar.gz) = fe9a02b851290013594f9cb403f8f1ff
> |
> | Cheers,
> | Darren
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>  
> iEYEARECAAYFAkoJ6cgACgkQP7JIXtvLbFXHdgCgirfIGKP4FW0fVpZP03NSf5iO
> lLEAoMbsvnPhzbAypjtdqTM6RNe+KXAM
> =i8Xs
> -----END PGP SIGNATURE-----
>