From owner-freebsd-stable Wed Nov 14 22:51:25 2001 Delivered-To: freebsd-stable@freebsd.org Received: from ns2.alphaque.com (ns2.alphaque.com [202.185.254.11]) by hub.freebsd.org (Postfix) with SMTP id 9501037B405 for ; Wed, 14 Nov 2001 22:51:17 -0800 (PST) Received: (qmail 25168 invoked from network); 15 Nov 2001 06:51:15 -0000 Received: from ns2.alphaque.com (HELO prophet.alphaque.com) (202.185.254.11) by ns2.alphaque.com with SMTP; 15 Nov 2001 06:51:15 -0000 Received: from localhost (1cei4gtthdiseijc@localhost [127.0.0.1]) by prophet.alphaque.com (8.11.6/8.11.6) with ESMTP id fAF6oZD01437 for ; Thu, 15 Nov 2001 14:50:35 +0800 (MYT) (envelope-from dinesh@alphaque.com) Date: Thu, 15 Nov 2001 14:50:35 +0800 (MYT) From: Dinesh Nair To: freebsd-stable@freebsd.org Subject: ipfw fails between 10/17 and 11/6 Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG here's an odd situation. cvsupped on october 17th, built and installed world, mergemastered, and everything runs fine. no problems here. since october 17, i've been cvsupping to RELENG_4, but not building world or even the kernel. the last cvsup is on november 6. today, i decide to build a new kernel, so mosey on into /usr/src/sys/i386/conf, config and build a new kernel. didnt forget to do a make depend either. installed the new kernel. upon rebooting with the new kernel, ipfw stops working. dmesg shows these lines: [start dmesg] IPFW: MOD_LOAD IP packet filtering initialized, divert disabled, rule-based forwarding enabled, default to deny, logging limited to 100 packets/entry by default [end dmesg] which is odd, since i had IPFIREWALL compiled in the kernel, and was _not_ loading ipfw.ko thru /boot/loader.conf. /sbin/ipfw commands after that fail the execute and dump core. removing IPFIREWALL and related options from the kernel doesnt help either. i never got the "IPFW: MOD_LOAD" line during the previous (oct 17) kernel. reverting back to the october 17 kernel brings all things back to normal. i know this sounds like a classic case of mismatch between userland and kernel, but they sources are just two weeks old, and both are RELENG_4 anyways. reading /usr/src/UPDATING says 20011102: ipfw/bridge/dummynet features merged from current. freebsd-stable archives brings up luigi's message that /sbin/ipfw and ipfw.ko need to be rebuilt. however, when i cd into /usr/src/sbin/ipfw and type make, i get the following error: cc -O -pipe -Wall -c /usr/src/sbin/ipfw/ipfw.c /usr/src/sbin/ipfw/ipfw.c:177: `DYN_SRC_ADDR' undeclared here (not in a function) /usr/src/sbin/ipfw/ipfw.c:177: initializer element is not constant /usr/src/sbin/ipfw/ipfw.c:177: (near initialization for `limit_masks[0].x') /usr/src/sbin/ipfw/ipfw.c:178: `DYN_SRC_PORT' undeclared here (not in a function) /usr/src/sbin/ipfw/ipfw.c:178: initializer element is not constant /usr/src/sbin/ipfw/ipfw.c:178: (near initialization for `limit_masks[1].x') /usr/src/sbin/ipfw/ipfw.c:179: `DYN_DST_ADDR' undeclared here (not in a function) /usr/src/sbin/ipfw/ipfw.c:179: initializer element is not constant /usr/src/sbin/ipfw/ipfw.c:179: (near initialization for `limit_masks[2].x') /usr/src/sbin/ipfw/ipfw.c:180: `DYN_DST_PORT' undeclared here (not in a function) /usr/src/sbin/ipfw/ipfw.c:180: initializer element is not constant /usr/src/sbin/ipfw/ipfw.c:180: (near initialization for `limit_masks[3].x') /usr/src/sbin/ipfw/ipfw.c: In function `show_ipfw': /usr/src/sbin/ipfw/ipfw.c:219: structure has no member named `dont_match_prob' /usr/src/sbin/ipfw/ipfw.c:390: structure has no member named `dyn_type' /usr/src/sbin/ipfw/ipfw.c:394: `DYN_KEEP_STATE' undeclared (first use in this function) /usr/src/sbin/ipfw/ipfw.c:394: (Each undeclared identifier is reported only once /usr/src/sbin/ipfw/ipfw.c:394: for each function it appears in.) /usr/src/sbin/ipfw/ipfw.c:397: `DYN_LIMIT' undeclared (first use in this function) /usr/src/sbin/ipfw/ipfw.c:400: structure has no member named `limit_mask' /usr/src/sbin/ipfw/ipfw.c:402: structure has no member named `conn_limit' /usr/src/sbin/ipfw/ipfw.c:392: warning: unreachable code at beginning of switch statement /usr/src/sbin/ipfw/ipfw.c: In function `list': /usr/src/sbin/ipfw/ipfw.c:826: structure has no member named `rule' /usr/src/sbin/ipfw/ipfw.c:830: structure has no member named `dyn_type' /usr/src/sbin/ipfw/ipfw.c:831: `DYN_LIMIT_PARENT' undeclared (first use in this function) /usr/src/sbin/ipfw/ipfw.c:832: structure has no member named `count' /usr/src/sbin/ipfw/ipfw.c:834: `DYN_LIMIT' undeclared (first use in this function) /usr/src/sbin/ipfw/ipfw.c:837: `DYN_KEEP_STATE' undeclared (first use in this function) /usr/src/sbin/ipfw/ipfw.c:832: warning: unreachable code at beginning of switch statement /usr/src/sbin/ipfw/ipfw.c: In function `add': /usr/src/sbin/ipfw/ipfw.c:1656: structure has no member named `dont_match_prob' /usr/src/sbin/ipfw/ipfw.c:1920: structure has no member named `dyn_type' /usr/src/sbin/ipfw/ipfw.c:1920: `DYN_LIMIT' undeclared (first use in this function) /usr/src/sbin/ipfw/ipfw.c:1921: structure has no member named `limit_mask' /usr/src/sbin/ipfw/ipfw.c:1927: structure has no member named `limit_mask' /usr/src/sbin/ipfw/ipfw.c:1937: structure has no member named `conn_limit' /usr/src/sbin/ipfw/ipfw.c:1938: structure has no member named `conn_limit' /usr/src/sbin/ipfw/ipfw.c:1940: structure has no member named `limit_mask' /usr/src/sbin/ipfw/ipfw.c:1949: structure has no member named `dyn_type' *** Error code 1 Stop in /usr/src/sbin/ipfw. any clues as to how i could resolve this issue ? problem seems to be halting me from building any new kernel until this is handled well. Regards, /\_/\ "All dogs go to heaven." dinesh@alphaque.com (0 0) http://www.alphaque.com/ +==========================----oOO--(_)--OOo----==========================+ | for a in past present future; do | | for b in clients employers associates relatives neighbours pets; do | | echo "The opinions here in no way reflect the opinions of my $a $b." | | done; done | +=========================================================================+ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message