From owner-freebsd-pf@FreeBSD.ORG Tue Jan 18 00:49:37 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8467716A4CE for ; Tue, 18 Jan 2005 00:49:37 +0000 (GMT) Received: from web53904.mail.yahoo.com (web53904.mail.yahoo.com [206.190.36.214]) by mx1.FreeBSD.org (Postfix) with SMTP id 0016643D45 for ; Tue, 18 Jan 2005 00:49:36 +0000 (GMT) (envelope-from stheg_olloydson@yahoo.com) Received: (qmail 10294 invoked by uid 60001); 18 Jan 2005 00:49:36 -0000 Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; b=fF8uL0zz7TyORe7pEui6xxiXkbm45/kniKCeYsGJtH+xqnaJvHG8HrZlZ8xWLkWDuLkEfcSlcn2o7kJtIsdtf5pmdU7G+lhVRX/7NBEDZXUZ7OBfZwnW9O71j1D9ivlkOrTGsTnQUFpIM8KVFYR/JU2uIJcc49+VQgUrHVNV/Go= ; Message-ID: <20050118004936.10292.qmail@web53904.mail.yahoo.com> Received: from [68.18.53.121] by web53904.mail.yahoo.com via HTTP; Mon, 17 Jan 2005 16:49:36 PST Date: Mon, 17 Jan 2005 16:49:36 -0800 (PST) From: stheg olloydson To: johnc909@comcast.net MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: freebsd-pf@freebsd.org Subject: Re: Looking for docs on installing pf with FreeBSD 5.2.1 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jan 2005 00:49:37 -0000 it was said: >Hi, >I'm running FreeBSD 5.2.1, and can't seem to find any comprihensive docs >on getting pf running on it. I've followed what's in the handbook, but >the kernel config file doesn't recognize the device statements for pf. >I really would like to avoid upgrading the system to 5.3+, if possible. > >Any pointers? > >-John Hello, In today's FBSD Stat Report, Max Laier said, in part: >FreeBSD 5.3 is the first release to include PF. It went out okay, but > some bugs were discovered too late to make it on the CD. It is > recommend to update `src/sys/contrib/pf' to RELENG_5. The specific > issues addressed are: > * Possible NULL-deref with user/group rules. > * Crash with binat on dynamic interfaces. > * Silent dropping of IPv6 packets with option headers. > * Endless loops with `static-port' rules. Because everything seems to be fine with my ruleset on 5.3p2, I won't be moving to -STABLE, but I won't reformat my (currently mothballed) former OBSD firewall box for a while longer. HTH, stheg __________________________________ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail