Date: Mon, 17 Jan 2005 16:49:36 -0800 (PST) From: stheg olloydson <stheg_olloydson@yahoo.com> To: johnc909@comcast.net Cc: freebsd-pf@freebsd.org Subject: Re: Looking for docs on installing pf with FreeBSD 5.2.1 Message-ID: <20050118004936.10292.qmail@web53904.mail.yahoo.com>
next in thread | raw e-mail | index | archive | help
it was said: >Hi, >I'm running FreeBSD 5.2.1, and can't seem to find any comprihensive docs >on getting pf running on it. I've followed what's in the handbook, but >the kernel config file doesn't recognize the device statements for pf. >I really would like to avoid upgrading the system to 5.3+, if possible. > >Any pointers? > >-John Hello, In today's FBSD Stat Report, Max Laier said, in part: >FreeBSD 5.3 is the first release to include PF. It went out okay, but > some bugs were discovered too late to make it on the CD. It is > recommend to update `src/sys/contrib/pf' to RELENG_5. The specific > issues addressed are: > * Possible NULL-deref with user/group rules. > * Crash with binat on dynamic interfaces. > * Silent dropping of IPv6 packets with option headers. > * Endless loops with `static-port' rules. Because everything seems to be fine with my ruleset on 5.3p2, I won't be moving to -STABLE, but I won't reformat my (currently mothballed) former OBSD firewall box for a while longer. HTH, stheg __________________________________ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050118004936.10292.qmail>