ipfw kernel module not being built

[Mark Johnston]

On Fri, Aug 11, 2017 at 02:06:02PM -0500, Bob Willcox wrote:
> > > On Aug 11, 2017, at 10:36, Bob Willcox <bob at immure.com> wrote:
> > > 
> > > When I rebuild my kernel on Jun 13th none of the previous ipfw kernel modules were built:
> > > 
> > > ipfw.ko
> > > ipfw_nat.ko
> > > ipfw_nat64.ko
> > > ipfw_nptv6.ko
> > > ng_ipfw.ko
> > > 
> > > and only this ipfw module was built:
> > > 
> > > ng_ipfw.ko
> > > 
> > > However, the verson of /etc/rc.d/ipfw that I'm running (from the
> > > freebsd-base-graphics branch) is failing to load ipfw so my firewall isn't
> > > starting.
> > > 
> > > So, what am I missing? Is it possible that the freebsd-base-graphics branch
> > > that I'm running has an old or improper version of /etc/rc.d/ipfw?

[...]

> include GENERIC_DRM

GENERIC_DRM sets MODULES_OVERRIDE, so only the specified modules are
built. In particular, ipfw*.ko does not get built. You'll need to either
remove the MODULES_OVERRIDE setting in GENERIC_DRM (which will make
kernel builds somewhat slower), or add

makeoptions	MODULES_OVERRIDE+= ipfw ...

to your custom config.

> 
> ident   TAVION_DRM
> 
> nooptions       INVARIANTS
> nooptions       INVARIANT_SUPPORT
> nooptions       DEBUG_MEMGUARD
> nooptions       DEBUG_REDZONE
> nooptions       WITNESS
> nooptions       WITNESS_ALL
> nooptions       WITNESS_SKIPSPIN
> 
> options         TMPFS