Re: newbie pf patching woes

["Jesse Lord" <Jesse@dimension3.com.au>]

Hi again - thank you for your reply, I am still a bit confused though:

Is there a way I can just upgrade pf? 

I have pf.c in my source tree, but I don't know how to compile it and
replace my current pf with the new one. I have seen instructions when
using a patch file, but not when I have a newer source file.

Also, according to http://www.openbsd.org/plus.html, the fix I need is
in stable:

Make pf(4) rdr and binat rules work again on protocols other than TCP,
UDP and ICMP.
[Applied to stable] 

But if I had 3.2 stable, and I upgraded to 3.3 stable, then don't I have
this patch? Or does the web page refer to 3.4-stable even though its not
out yet?

Big thanks to anyone who can help me on this one.

Jesse Lord


> -----Original Message-----
> From: Nick Holland [mailto:nick@holland-consulting.net] 
> Sent: Friday, 26 September 2003 12:20 PM
> To: Jesse Lord; Misc @OpenBSD
> Subject: Re: newbie 3.3 current woes
> 
> 
> Jesse Lord wrote:
> > 
> > Hello all,
> > I have been trying to upgrade my BSD system since Monday 
> morning, and 
> > have reached the end of my tether. Here is the relevant info:
> > 
> > Originally 3.2 stable from a snapshot
> > Upgraded to 3.3-stable from a snapshot for "reply-to" 
> functionality in 
> > pf Discovered that pf rdr commands do not redirect GRE in 
> 3.3 without 
> > a pf.c patch
> > Spent the rest of the week learning how to use CVS, downloaded the
> > source tree twice, upgrading gcc gives me errors about
> > __bounded__ atributes - and when I read the mini-FAQ regarding
> > __bounded__ issues it tells me to upgrade GCC... cant
> > upgrade to current because my make builds result in 
> errors....I am going
> > insane trying to get this working people - someone
> > please help me.
> 
> Sounds like you are trying to go to 3.4-current (there is no 
> more 3.3-current). Can't do that from 3.2/3.3 -- see the part 
> in the upgrade-minifaq about i386 flag days (assuming you are 
> running an i386 system).  You need to reinstall from 
> snapshot, you can't build your way through it.
> 
> Nick.
> -- 
> http://www.holland-consulting.net