options FAST_IPSEC + device pfsync incompatibility?

Niki Denev nike_d at cytexbg.com
Thu Aug 19 07:23:58 PDT 2004

While playing for a while with IPSEC and got around the racoon/isakmpd 
MSIZE related problems, i've decided to give FAST_IPSEC a try.
But with option FAST_IPSEC my kernel refused to compile.
I tracked down the problem to device pfsync.
If it is not in the kernel config, then the kernel compiles OK.

here is my config :
su-2.05b# uname -a
FreeBSD phobos.totalterror.net 6.0-CURRENT FreeBSD 6.0-CURRENT #9: Thu Aug 
19 13
:50:12 EEST 2004     
root at phobos.totalterror.net:/usr/obj/usr/src/sys/PHOBOS-X31

cvsupped today...,

and the kernel stops compiling with this error :

cc -c -O -pipe  -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes 
missing-prototypes -Wpointer-arith -Winline -Wcast-qual  -fformat-extensions 
d=c99 -g -nostdinc -I-  -I. -I../../.. -I../../../contrib/dev/acpica 
contrib/altq -I../../../contrib/ipfilter -I../../../contrib/pf 
b/dev/ath -I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm 
-include opt_global.h -fno-common -finline-limit=8000 --param 
=100 --param large-function-growth=1000  -mno-align-long-strings 
ck-boundary=2 -ffreestanding -Werror  ../../../netinet/in_proto.c
In file included from ../../../netinet/in_proto.c:91:
../../../contrib/pf/net/pfvar.h:57: error: redefinition of `union 
*** Error code 1

Stop in /usr/src/sys/i386/compile/PHOBOS-X31.


the problem seems to be that in in_proto.c there is #ifdef DEV_PFSYNC, which 
if defined includes pfvar.h, but at this point the 'union sockaddr_union' is 
already defined by another include....

I can supply full kernel config and any other info if needed.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20040819/667fd64a/attachment.bin

More information about the freebsd-current mailing list