Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Apr 2013 14:49:19 -0400
From:      "Sam Fourman Jr." <sfourman@gmail.com>
To:        Cy Schubert <Cy.Schubert@komquats.com>
Cc:        Warren Block <wblock@wonkity.com>, Scott Long <scott4long@yahoo.com>, "current@freebsd.org" <current@freebsd.org>, Chris Rees <crees@freebsd.org>, Rui Paulo <rpaulo@felyko.com>, "net@freebsd.org" <net@freebsd.org>, "cpet@sdf.org" <cpet@sdf.org>
Subject:   Re: ipfilter(4) needs maintainer
Message-ID:  <CAOFF%2BZ2fb4MmRnUkAOYQKodOVyi-0UDVxGwXh0Xj1xnct88MmA@mail.gmail.com>
In-Reply-To: <201304151748.r3FHmhC3002734@slippy.cwsent.com>
References:  <rpaulo@felyko.com> <18DF99B0-6E66-4906-A233-7778451B8A92@felyko.com> <201304151748.r3FHmhC3002734@slippy.cwsent.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Thank you to those that have expressed interest in maintaining IP Filter..

My thoughts are, could we consider putting a option in the kernel config,
and leaving it off by default for GENERIC?
I think this is a acceptable compromise, considering some people wish for
it to be removed.

Sam Fourman Jr.


On Mon, Apr 15, 2013 at 1:48 PM, Cy Schubert <Cy.Schubert@komquats.com>wrot=
e:

> In message <18DF99B0-6E66-4906-A233-7778451B8A92@felyko.com>, Rui Paulo
> writes:
> > 2013/04/15 9:55=E3=80=81Cy Schubert <Cy.Schubert@komquats.com> =E3=81=
=AE=E3=83=A1=E3=83=83=E3=82=BB=E3=83=BC=E3=82=B8:
> >
> > > I've been planning on taking on IP Filter for quite some time.
> > > Unfortunately I've left my src commit bit lapse (my ports commit bit =
is
> > > alive and well though) thus I'm looking for a mentor. In addition I'm
> > > working on an ACER WMI/ACPI kld. One mentor would be preferred but tw=
o
> > > would be fine too.
> >
> > What are your plans regarding ipfilter? I remain unconvinced that it
> should b
> > e in the base system. Perhaps you can work on it as a port?
>
> The initial plan was to import IP Filter 5.1.2 into HEAD. darrenr@ hadn't
> done much with IPF while employed with Sun. Since then there has been som=
e
> development that is long overdue for HEAD.
>
> I'm not sure if I'd MFC it into 9 or not.
>
> I did consider a port but given it would has to touch bits and pieces of
> the source tree (/usr/src), a port would be messy and the decision was ma=
de
> to work on importing it into base.
>
> >
> > Why do you want to work on something that people have been trying to
> remove s
> > ince 2005?
>
> I and others have been using it in FreeBSD for over decade. For the longe=
st
> of time we'd use a common set of rules across a FreeBSD and Solaris farm
> (using ipfmeta, makefiles, rsync, rdist, and a local CVS repo).
> Interoperability with other systems which use IP Filter is a plus. If
> there's a maintainer, it only makes FreeBSD richer. Losing IP Filter woul=
d
> be a loss.
>
>
> --
> Cheers,
> Cy Schubert <Cy.Schubert@komquats.com>
> FreeBSD UNIX:  <cy@FreeBSD.org>   Web:  http://www.FreeBSD.org
>
>
> _______________________________________________
> freebsd-current@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org=
"
>



--=20

Sam Fourman Jr.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOFF%2BZ2fb4MmRnUkAOYQKodOVyi-0UDVxGwXh0Xj1xnct88MmA>