From owner-freebsd-pf@FreeBSD.ORG Mon Mar 21 10:28:27 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CA4E516A4CF for ; Mon, 21 Mar 2005 10:28:27 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id B180B43D49 for ; Mon, 21 Mar 2005 10:28:26 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 55626 invoked from network); 21 Mar 2005 09:59:44 -0000 Received: from unknown (HELO freebsd.org) ([62.48.0.53]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 21 Mar 2005 09:59:44 -0000 Message-ID: <423EA1CB.58BE5E27@freebsd.org> Date: Mon, 21 Mar 2005 11:28:27 +0100 From: Andre Oppermann X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: =?iso-8859-1?Q?=A3ukasz?= Bromirski References: <42348BDF.2080101@authtec.com> <423DCD9A.4010401@mr0vka.eu.org> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit cc: freebsd-net@freebsd.org cc: Claudio Jeker cc: sam.wun@authtec.com cc: freebsd-pf@freebsd.org Subject: Re: OpenBGPD with FreeBSD X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2005 10:28:27 -0000 Łukasz Bromirski wrote: > > Claudio Jeker wrote: > > >>Had openbgpd ported to freebsd or is it in any progress? > >>If I want to install it in FreeBSD, is there any guideline for me to follow? > > You have to remove the full pfkey interface and replace it with dummy > > functions as it is incompatible. So tcp md5 does not work but I think it > > is still broken in FreeBSD anyway. > > Here is a diff I created some time ago. Perhaps some other minor changes > > are needed. > > I've created short HOWTO as well as diff to make OpenBGPd easily > installable on FreeBSD (tested 5.3/5.4). It works with pf (pushing > prefixes to pf tables), but of course lacks MD5 authorization for > peers. Claudio, thanks for suggestions about the pfkey. > > Here's short HOWTO: > http://lukasz.bromirski.net/projekty/openbgpd/index-en.html > > If anyone will push this further and make a port out of it, it > would be really nice. You could make a port and I can commit it. -- Andre