IPfilter
[Top] [All Lists]

Re: ipfstat not clearing the state table - a similar problem?

To: ipfilter@coombs.anu.edu.au
Subject: Re: ipfstat not clearing the state table - a similar problem?
From: "Simon A. Boggis" <s.a.boggis@qmul.ac.uk>
Date: Tue, 12 Dec 2006 01:00:22 +0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: ipfilter-list@securepoint.com
In-reply-to: <457D59B3.6090505@reed.wattle.id.au>
References: <200608141903.k7EJ3AIa000853@firewall.reed.wattle.id.au> <EC6E553A-F2B3-429E-A5FC-77A53A7432FC@uia.net> <45781EDE.4080205@qmul.ac.uk> <457A1078.6090901@reed.wattle.id.au> <e2e114e10612110302r1df24c33n1470d4c8b29a200f@mail.gmail.com> <457D59B3.6090505@reed.wattle.id.au>
Sender: owner-ipfilter@coombs.anu.edu.au
User-agent: Thunderbird 1.5.0.8 (X11/20061115)
Darren Reed wrote:
> Well, if someone could kindly run that patch I mailed out, it would help :)
> 
> The current system I'm using isn't seeing it, but I don't doubt that there
> is a bug here.
> 
> Darren

Hi Darren,

thanks for the patch - I'll run it as soon as possible on one of my
problem systems and report back to you, however since they're in
production use I'm forced to wait for a suitable opportunity to update
kernel and tools and reboot them - currently I'm hoping to do this
Thursday morning.

Unfortunately, I'm afraid I haven't managed to get a version of ipf to
build with your orph.patch applied - I've tried to rebuild the one I'm
currently using - ip_fil4.1.13 (and also 4.1.15 just in case it was
different), but I get the following error:

$ make freebsd5
[snip]
gcc -Wall -Wuninitialized -Wstrict-prototypes -O -Wmissing-prototypes
-Wpointer-arith -Wno-sign-compare -Wno-traditional -Werror -I. -g
-I../.. -D_BSD_SOURCE    -DUSE_INET6  -DIPFILTER_LOG -DIPFILTER_LOOKUP
-DIPFILTER_SCAN -DIPFILTER_SYNC -DIPFILTER_CKSUM -c ../../ip_state.c -o
ip_state_u.o
../../ip_state.c: In function `fr_stateunload':
../../ip_state.c:304: error: `ISL_UNLOAD' undeclared (first use in this
function)
../../ip_state.c:304: error: (Each undeclared identifier is reported
only once
../../ip_state.c:304: error: for each function it appears in.)
*** Error code 1

Stop in
/usr/src/ipfilter/ip_fil4.1.15_with_QM_patches/BSD/FreeBSD-5.4-RELEASE-p22-i386.
*** Error code 1

I haven't had the chance today to look into the above compile problem
further.

Regards

Simon

-- 
----------------------------------------------------------------------
Dr Simon A. Boggis                              Senior Network Analyst
Computing Services,                                 Tel. 020 7882 7078
Queen Mary, University of London, London E1 4NS UK.

<Prev in Thread] Current Thread [Next in Thread>