5 First, you will need to either:
6 (a) have a source license for the kernel so you can patch some files or
7 (b) obtain the relevant pre-compiled .o files (I can't supply these yet).
9 The files which you will need patched are:
10 ip_input.c, ip_output.c (maybe in_proto.c and ioconf.c.i386 too - NOT sure).
12 First, you need to build IP Filter. Do this from the "ip_fil3.2.x"
13 directory with the command "make bsdos". If this completes successfully,
14 install the various bits and pieces with "make install-bsd".
16 Prior to starting, it is a good idea for you to know what your kernel config
17 file is (it appears that the script guesses incorrectly at present).
19 Once you have that in mind, run the 'kinstall' script in the BSDOS3
20 directory. This will attempt to patch a bunch of files. If you've
21 obtained the relevant .o files, ignore the errors, otherwise please
22 report them to me and mention which version of BSD/OS you are using
23 and on what platform (Sparc, i386, etc). It will also go and install
24 all the IP Filter .c and .h files where they can be find when it comes
25 time to build the kernel.
27 The script will then pause and ask you for your kernel configuration
28 file. After you enter this, it will add "options IPFILTER" to your
29 kernel configuration file. IF YOU WANT TO DO LOGGING, ADD
30 "options IPFILTER_LOG" to your kernel configuration file NOW!
32 Now that you've got your kernel configuration file done, use config
33 to setup a new kernel build and complete with make.
35 When the kernel rebuilt is complete, put it into / and reboot with
36 your new kernel. If IP Filter has been configured into your kernel
37 correctly, you will see a message like this when your system boots:
39 IP Filter: initialized. Default = pass all, Logging = enabled
41 Upon logging in, the IP Filter commands ipfstat, et al, should all