From owner-freebsd-current@FreeBSD.ORG Fri Apr 19 15:46:06 2013 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id C3AF8B13; Fri, 19 Apr 2013 15:46:06 +0000 (UTC) (envelope-from "."@babolo.ru) Received: from smtp1.babolo.ru (smtp1.babolo.ru [195.9.14.139]) by mx1.freebsd.org (Postfix) with ESMTP id 2498CCDF; Fri, 19 Apr 2013 15:46:05 +0000 (UTC) Received: from cicuta.babolo.ru (cicuta.babolo.ru [194.58.246.5]) by smtp1.babolo.ru (8.14.2/8.14.2) with SMTP id r3J9uDdu051446; Fri, 19 Apr 2013 13:56:13 +0400 (MSK) (envelope-from .@babolo.ru) Received: (nullmailer pid 94223 invoked by uid 136); Fri, 19 Apr 2013 10:06:20 -0000 Date: Fri, 19 Apr 2013 14:06:20 +0400 From: Aleksandr A Babaylov <.@babolo.ru> To: David Demelier Subject: Re: ipfilter(4) needs maintainer Message-ID: <20130419100620.GA94200@babolo.ru> References: <96D56EAE-E797-429E-AEC9-42B19B048CCC@FreeBSD.org> <6DEDD3EA-45C1-4549-AA13-5E4F6674BE3E@samsco.org> <2D0B66DB-E232-4F34-9D01-57DF226B9BAA@FreeBSD.org> <2DA4A561-3304-432D-B5D1-7053A27E758F@yahoo.com> <20130414160648.GD96431@in-addr.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Mailman-Approved-At: Fri, 19 Apr 2013 15:53:58 +0000 Cc: Warren Block , Scott Long , "current@freebsd.org" , Gary Palmer , Chris Rees , Rui Paulo , "net@freebsd.org" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Apr 2013 15:46:06 -0000 On Fri, Apr 19, 2013 at 11:45:57AM +0200, David Demelier wrote: > 2013/4/14 Gary Palmer : > > Do we honestly need three packet filters? > > No, for me only one should be present. I completely understand that > some users still use IPFilter and IPFW but why providing three packet > filters? > > The answer should be: use one and document only one. If at the > beginning we started documenting only one all users should have used > the only one present. Now we really need to remove the ancestral > ipfilter and tell people switching to pf(4). IPFW. It is more logical and easy to use in complex context. > Everything in life change, if we need to maintain all code from the > past we will have a lot of compat code that pollute the full source > tree and we will never improve the code just because of old bits