From owner-freebsd-current@FreeBSD.ORG  Mon Apr 15 10:15:41 2013
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by hub.freebsd.org (Postfix) with ESMTP id B40C09AD;
 Mon, 15 Apr 2013 10:15:41 +0000 (UTC) (envelope-from lev@FreeBSD.org)
Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru
 [IPv6:2a01:4f8:131:60a2::2])
 by mx1.freebsd.org (Postfix) with ESMTP id 7D36CF7;
 Mon, 15 Apr 2013 10:15:41 +0000 (UTC)
Received: from lion.home.serebryakov.spb.ru (unknown
 [IPv6:2001:470:923f:1:d051:3b46:4a53:4fdc])
 (Authenticated sender: lev@serebryakov.spb.ru)
 by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPA id 38D2D4AC57;
 Mon, 15 Apr 2013 14:15:38 +0400 (MSK)
Date: Mon, 15 Apr 2013 14:15:36 +0400
From: Lev Serebryakov <lev@FreeBSD.org>
Organization: FreeBSD
X-Priority: 3 (Normal)
Message-ID: <951943801.20130415141536@serebryakov.spb.ru>
To: Mark Martinec <Mark.Martinec+freebsd@ijs.si>
Subject: Re: ipfilter(4) needs maintainer
In-Reply-To: <201304150025.07337.Mark.Martinec+freebsd@ijs.si>
References: <20130411201805.GD76816@FreeBSD.org>
 <20130414160648.GD96431@in-addr.com>
 <36562.1365960622.5652758659450863616@ffe10.ukr.net>
 <201304150025.07337.Mark.Martinec+freebsd@ijs.si>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: freebsd-net@freebsd.org, current@freebsd.org
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
Reply-To: lev@FreeBSD.org
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2013 10:15:41 -0000

Hello, Mark.
You wrote 15 =D0=B0=D0=BF=D1=80=D0=B5=D0=BB=D1=8F 2013 =D0=B3., 2:25:07:

>> Yes! This is the most clever thought in this thread. Why we need 3
>> firewalls? Two packet filters it's excess too. We have two packet filter=
s:
>> one with excellent syntax and functionality but with outdated bandwidth
>> control mechanism (aka ALTQ); another - with nice traffic
>> shaper/prioritization (dummynet)/classification (diffused) but with
>> complicated implementation  in not trivial tasks. May be the next step
>> will be discussion about one packet filter in the system?..

MM> ... and as far as I can tell none of them is currently usable
MM> on an IPv6-only FreeBSD (like protecting a host with sshguard),
MM> none of them supports stateful NAT64, nor IPv6 prefix translation :(
 IPv6 prefix translation?! AGAIN!? FML. I've thought, that IPv6 will
render all that NAT nightmare to void. I hope, IPv6 prefix translation
will not be possible never ever!

--=20
// Black Lion AKA Lev Serebryakov <lev@FreeBSD.org>