Subject: Re: Getting a working pflkm for 2.0.2
To: Adam Hess <drsaturn@gmail.com>
From: Andy Ruhl <acruhl@gmail.com>
List: netbsd-help
Date: 10/30/2005 07:23:30
On 10/29/05, Adam Hess <drsaturn@gmail.com> wrote:
> On 10/29/05, St=E9phane Witzmann <stephane.witzmann@gmail.com> wrote:
> > Adam Hess wrote:
> >
> > > All,
> > >
> > > I'm trying to convert an old Dell NAT box of mine from linux to
> > > netbsd. So far I've got both NICs working (using the tlp driver for
> > > both).  And now I'm trying to get the pf module from pkgsrc to load.
> > > So far I've tried the following:
> > >
> > > Using the binary pflkm-20050511.tgz for netbsd 2.0 (pkgsrc 2005Q2 and
> > > 2005Q3) which give the the following when I try to load:
> > >
> > >  # modload /usr/pkg/lkm/pf.o
> > >  modload: error initializing module: Program version wrong
> > >
> > > Which makes sense since I'm using 2.0.2 not 2.0 but I don't see an
> > > i386 version for 2.0.2.
> > >
> > > So then I tried compiling from pkg src but make fails with the
> > > following when compiling if_pflog.c:
> > >
> > >  if_pflog.c:39:23: sys/param.h: No such file or directory
> > >  if_pflog.c:40:23: sys/param.h: No such file or directory
> > >  In file included from if_pflog.c:41:
> > >  ../include/sys/mbuf.h:79:24: sys/malloc.h No such file or directory
> > >
> > > Followed by a list of simmilar errors.
> > >
> > > So anyway I just want to get a pf.o that works. I don't particularly
> > > care if it is binary or from source.  Any ideas?
> > >
> > > Thanks,
> > > -Adam
> >
> > That is probably not gonna help, but how about using ipf instead of pf =
? It
> > is included in GENERIC* kernels.
> >
> >
> > St=E9phane Witzmann
>
> Yeah, thats plan B.  I'd rather use pf though.
>

pf is nicer.

I'm using pf on 2.0.2 which I built from pkgsrc. It doesn't load
because I have a dual CPU box, but if I force load it, it works.

I've been having various build issues with pkgsrc -current, maybe
there is some general problem? pflkm shouldn't be too difficult to
build. But getting the right source tree is probably a good idea.

Andy