RE: IPFilter 4.1

Darren

Here is a replacement line for pfil Makefile that allows the compile to work with GCC.

S64FLAGS=-m64 -mcmodel=medlow -DDO=pfil${SBITS}

Once you compile and reboot all works ok UNLESS you have a SPPP0 (ADSL) interface.

If SPPP is defined it /etc/opt/pfil/iu.ap then kernel panic will occur.

Any ideas?

Without SPPP defined everything would boot except IPNAT which complained about my syntax:-

map sppp0 10.10.10.0/24 -> 0/32 proxy port ftp ftp/tcp mssclamp 1452
map sppp0 10.10.10.0/24 -> 0/32 portmap tcp/udp auto mssclamp 1452
map sppp0 10.10.10.0/24 -> 0/32 mssclamp 1452
# Redirect to squid on port 8080
rdr hme0 0.0.0.0/0 port 80 -> 10.10.10.254 port 8080 tcp

And of course nothing was working.

Regards,

Adam


-----Original Message-----
From: Darren Reed [mailto:darrenr@reed.wattle.id.au]
Sent: Thursday, 12 February 2004 10:49 PM
To: Adam Summerfield
Cc: ipfilter@coombs.anu.edu.au
Subject: Re: IPFilter 4.1

In some email I received from Adam Summerfield, sie wrote:
> Darren,
>
> There are problems compiling pfil2.1 on Solaris 9 with GCC.
[...]

I've never built it with gcc so I'm not surprised.

A completely different Makefile is required for gcc.

Darren