From owner-freebsd-pf@FreeBSD.ORG Sun Dec 7 15:28:12 2014 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 19B4E51B for ; Sun, 7 Dec 2014 15:28:12 +0000 (UTC) Received: from forward3h.mail.yandex.net (forward3h.mail.yandex.net [IPv6:2a02:6b8:0:f05::3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Certum Level IV CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 86291DE6 for ; Sun, 7 Dec 2014 15:28:11 +0000 (UTC) Received: from web11h.yandex.ru (web11h.yandex.ru [84.201.186.40]) by forward3h.mail.yandex.net (Yandex) with ESMTP id 4CABA13619AE; Sun, 7 Dec 2014 18:27:58 +0300 (MSK) Received: from 127.0.0.1 (localhost [127.0.0.1]) by web11h.yandex.ru (Yandex) with ESMTP id B5FBD1204ED; Sun, 7 Dec 2014 18:27:57 +0300 (MSK) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1417966077; bh=pbLL/B0ZhCgLG5YuN13zujKF41RvQfSZ00odBfgfzOw=; h=From:To:In-Reply-To:References:Subject:Date; b=Eo8ssA1tFiftKf/bE8G8Qh0Yp2EDZRShNsVqSysT/4RUjGjsFbfvteC46agBi2rbz k3cHwCeFJIsplKfAxtY1XvU6w0T+y9fW+0onDl4Cs3QiSsYPJwPmq9J8ZXA/ASCMrh Ob2ocUln5voF3Xonl+nyrJIrzPZ66sP/i0iz1Rz4= Received: from 053f90e4.rdns.100tb.com (053f90e4.rdns.100tb.com [5.63.144.228]) by web11h.yandex.ru with HTTP; Sun, 07 Dec 2014 18:27:57 +0300 From: Martin Hanson To: Dewayne Geraghty , "freebsd-pf@freebsd.org" In-Reply-To: <54843241.1070908@heuristicsystems.com.au> References: <363021417833295@web21g.yandex.ru> <54843241.1070908@heuristicsystems.com.au> Subject: Re: FOLLOW-UP MIME-Version: 1.0 Message-Id: <413861417966077@web11h.yandex.ru> X-Mailer: Yamail [ http://yandex.ru ] 5.0 Date: Sun, 07 Dec 2014 16:27:57 +0100 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=utf-8 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Dec 2014 15:28:12 -0000 I stand corrected on that. Thanks Dewayne. 07.12.2014, 11:56, "Dewayne Geraghty" : > On 6/12/2014 1:34 PM, Martin Hanson wrote: >>  Okay, this part "Has any important bugs been fixed in PF on OpenBSD >>  since the current port in FreeBSD that actually makes the current PF in >>  FreeBSD "dangerous" to run with?" was actually a really stupid question! >> >>  The.. >> >>  http://svnweb.freebsd.org/base/vendor-sys/pf/4.5.002/?view=log >> >>  .. shows that the last import was for tag 4.5.002 5 years and 3 month >>  ago! >> >>  Going back to that time in the OpenBSD CVS log and then scrolling up >>  until present day shows quite a bunch of REALLY important fixes! I am >>  NOT talking about the changes made by the OpenBSD guys, just bug and >>  error fixes! >> >>  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c >> >>  Problems that can cause kernel crashes, fixes for PF crashing faults, >>  out-of-memory errors, leak of states, and a whole lot of other >>  important stuff. >> >>  Nobody in their right mind would run the current version of PF on >>  FreeBSD! >> >>  I am sorry, but how can someone be so stupid as to get a whole bunch of >>  new features into a product that seriously needs upgrading first!? >> >>  Whats going on FreeBSD? You used to be all about quality, now you're >>  all about "bleeding edge features" and don't give a s*** about the rest? >> >>  Linux can get away with that crap ONLY because such a huge bunch of >>  people and organisations are running and supporting it, they have a LOT >>  of people developing stuff and fixing stuff really quick, FreeBSD >>  haven't got that user base! >> >>  It needs to be about quality over features! Like in the good old 4.x >>  and 5.x days! >> >>  Martin >>  _______________________________________________ >>  freebsd-pf@freebsd.org mailing list >>  http://lists.freebsd.org/mailman/listinfo/freebsd-pf >>  To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > > Martin, > I'm new to the pf list, as I'm looking to transition from ipfw to pf.  I > wonder if your comparison might be better placed between > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c > and the goodies under > https://svnweb.freebsd.org/base/head/sys/netpfil/pf/ > rather than https://svnweb.freebsd.org/base/vendor-sys/pf/ > I don't know if the latter has any relevance? > Regards, Dewayne > > -- > For the talkers: “The superior man acts before he speaks, and afterwards speaks according to his action.” > For everyone else: “Life is really simple, but we insist on making it complicated.”