>Number:         30095
>Category:       bin
>Synopsis:       <netinet/ipl.h> should be installed.
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Apr 29 16:11:00 +0000 2005
>Originator:     Takahiro Kambe
>Release:        NetBSD 3.99.3
>Organization:
Takahiro Kambe
>Environment:
	
	
System: NetBSD reef.back-street.net 3.99.3 NetBSD 3.99.3 (CF-R3E) #44: Wed Apr 20 10:55:53 JST 2005 taca@reef.back-street.net:/data/i386/obj/sys/arch/i386/compile/CF-R3E i386
Architecture: i386
Machine: i386
>Description:
	Currently, IP Filter's ipl.h header file isn't installed under
	/usr/include/netinet.  It prevent to use of IP Filter's NAT related
	system calls.

	As I noted on bin/30093, ipnat(4) related system calls takes
	"ipfobj" structure whose member "ipfo_rev" must be initialized
	by IP Filter's version.  For example,
	/usr/src/dist/ipf/samples/proxy.c or ipnat(8) use IPFILTER_VERSION
	to initialize "ipfo_rev".

	Since IPFILTER_VERSION is only defined in ipl.h header file and
	currently ipl.h isn't installed as system header, user's program
	can't use ipnat(4) related system calls.
>How-To-Repeat:
	Try to fix a sample code in bin/30093 using ipfobj structure.
>Fix:
	Install ipl.h to /usr/include/netinet fix this problem.
	And not only NetBSD current but 2.0 and 3.0 need to be fixed.

>Unformatted: