Re: error with buildkernel

On Thu, 17 Aug 2006 08:49:19 +1000, Pet Farrari <pf@xxxxxxxxxxx> wrote:
Giorgos Keramidas wrote:
On Wed, 16 Aug 2006 14:42:58 GMT, Peter Scott <ps@xxxxxxxxxxx> wrote:
Hi,
I don't know why I got this error.
It said
/usr/src/sys/netinet/ip_divert.c:40:2: #error "IPDIVERT requires IPFIREWALL"

but my kernel configuration has the following options defined:

options IPFIREWALL #firewall
#options IPFIREWALL_VERBOSE #print
information about
options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
#options IPSTEALTH
options IPDIVERT
options TCP_DROP_SYNFIN

Can anyone tell me what's wrong?

There's a minor difference in the snippet above ...

#options IPFIREWALL #firewall
#options IPDIVERT #divert sockets
options IPFILTER #ipfilter support
device pf #PF OpenBSD packet-filter firewall
device pflog #logging support interface for PF
device pfsync #synchronization interface for PF

options IPSTEALTH
options IPDIVERT
options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN

And this one.

Note that in your kernel configuration IPFIREWALL is commented
out, and there are two occurences of IPDIVERT. The first
IPDIVERT is commented out too, but then there is a second one,
near IPSTEALTH.

It's the second one that causes the build error. Remove it and
uncomment the original IPFIREWALL and IPDIVERT lines and you
should be set to go :-)

A good way of catching changes like this, which may break the
build, is to keep GENERIC around and then use:

% cd /usr/src/sys/i386/conf
% diff -u GENERIC CORE

The diff output lines will clearly show up what has changed from
GENERIC, and will (usually) point very quickly to the place that
needs fixing.


.