Upgrading Solaris 10 U8 to ip_fil5.1.0

"Brian H. Nelson" <[email protected]> Wed, 19 May 2010 18:28:23 -0400
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <[email protected]>
Hello again.

I'm trying to build ipf 5.1.0 on Solaris 10 U8 (kernel 142901-11) on 
amd64. Everything builds and installs fine, but when I try to load the 
ipf module I get these errors:

May 19 16:45:38 dmk-test4 genunix: [ID 819705 kern.notice] 
/usr/kernel/drv/amd64/ipf: undefined symbol
May 19 16:45:38 dmk-test4 genunix: [ID 826211 kern.notice]  
'net_unregister_hook'
May 19 16:45:38 dmk-test4 genunix: [ID 819705 kern.notice] 
/usr/kernel/drv/amd64/ipf: undefined symbol
May 19 16:45:38 dmk-test4 genunix: [ID 826211 kern.notice]  
'net_register_hook'
May 19 16:45:38 dmk-test4 genunix: [ID 819705 kern.notice] 
/usr/kernel/drv/amd64/ipf: undefined symbol
May 19 16:45:38 dmk-test4 genunix: [ID 826211 kern.notice]  'net_release'
May 19 16:45:38 dmk-test4 genunix: [ID 472681 kern.notice] WARNING: 
mod_load: cannot load module 'ipf'

I found this old related thread
http://marc.info/?t=119223191000001&r=1&w=2
but the fix in that thread doesn't appear to apply to 5.1.0.

Here is ldd output if it is helpful:
$ ldd /usr/kernel/drv/amd64/ipf
        misc/hook =>     (file not found)
        misc/neti =>     (file not found)
        misc/md5 =>      (file not found)
        drv/ip =>        (file not found)

It appears that the netinfo interface changed at some point. I tried 
changing the function names to the 'new' ones in solaris.c but that 
ended in kernel panic when it booted up. Apparently it is something more 
complicated than that.
http://www.mail-archive.com/[email protected]/msg06695.html

Thank you for any assistance.

-Brian

-- 
----------------------------------------
Brian H. Nelson
Network Security Analyst
Network and Telecommunications Services
Youngstown State University
bnelson[at]cis[dot]ysu[dot]edu
----------------------------------------