[CFT] SMP-friendly pf

[Gleb Smirnoff]

On Tue, Sep 11, 2012 at 02:22:39PM +0300, Oguz Yilmaz wrote:
O> Ok. We go thru head.
O> We compiled the kernel and boot into 10.0
O>  FreeBSD 10.0-CURRENT #0 r240350
O> 
O> # pfctl -sr
O> No ALTQ support in kernel
O> ALTQ related functions disabled
O> pfctl: DIOCGETRULES: Permission denied
O> ]# pfctl -si
O> No ALTQ support in kernel
O> ALTQ related functions disabled
O> pfctl: DIOCGETSTATUS: Permission denied
O> 
O> This Permission Denied issues should be old pfctl.
O> 
O> Now, how can we compile pfctl and snmp_pf without make world?

You really should go with make world, because no one guarantees
that head/ branch would work with mismatching world and kernel.

However answer for your question is:

1) Install pfvar.h:

cat /usr/src/sys/contrib/pf/net/pfvar.h > /usr/include/pfvar.h

2) Rebuild and reinstall pfctl and snmp_pf

cd /usr/src/sbin/pfctl
make clean
make
make install

cd /usr/src/usr.sbin/bsnmpd/modules/snmp_pf
make clean
make 
make install

But I'd recommend doing full buildworld and keep your kernel and userland in sync.

-- 
Totus tuus, Glebius.