Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Apr 2013 12:54:12 -0600
From:      Scott Long <scott4long@yahoo.com>
To:        "Sam Fourman Jr." <sfourman@gmail.com>
Cc:        Warren Block <wblock@wonkity.com>, "current@freebsd.org" <current@freebsd.org>, Chris Rees <crees@freebsd.org>, Rui Paulo <rpaulo@felyko.com>, "net@freebsd.org" <net@freebsd.org>, Cy Schubert <Cy.Schubert@komquats.com>, "cpet@sdf.org" <cpet@sdf.org>
Subject:   Re: ipfilter(4) needs maintainer
Message-ID:  <D6ADE9C6-868A-4524-A6D7-4EB88F9D6287@yahoo.com>
In-Reply-To: <CAOFF%2BZ2fb4MmRnUkAOYQKodOVyi-0UDVxGwXh0Xj1xnct88MmA@mail.gmail.com>
References:  <rpaulo@felyko.com> <18DF99B0-6E66-4906-A233-7778451B8A92@felyko.com> <201304151748.r3FHmhC3002734@slippy.cwsent.com> <CAOFF%2BZ2fb4MmRnUkAOYQKodOVyi-0UDVxGwXh0Xj1xnct88MmA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
The desire to remove it stems from the inability to give it adequate =
engineering=20
service as the network stack evolves.  Simply taking it out of a kernel =
config file
doesn't address that problem at all.  If it's going to stay in FreeBSD =
at all, it
needs to be maintained.  This could be set about a fair amount of stuff =
in FreeBSD,
but IPFilter stands out since there's a high rate of needed change =
happening in
the network stack, and it shouldn't be left to rot nor to be a stumbling =
block for
those changes.

Scott

On Apr 15, 2013, at 12:49 PM, "Sam Fourman Jr." <sfourman@gmail.com> =
wrote:

> Thank you to those that have expressed interest in maintaining IP =
Filter..
>=20
> My thoughts are, could we consider putting a option in the kernel =
config,
> and leaving it off by default for GENERIC?
> I think this is a acceptable compromise, considering some people wish =
for
> it to be removed.
>=20
> Sam Fourman Jr.
>=20
>=20
> On Mon, Apr 15, 2013 at 1:48 PM, Cy Schubert =
<Cy.Schubert@komquats.com>wrote:
>=20
>> In message <18DF99B0-6E66-4906-A233-7778451B8A92@felyko.com>, Rui =
Paulo
>> writes:
>>> 2013/04/15 9:55=E3=80=81Cy Schubert <Cy.Schubert@komquats.com> =
=E3=81=AE=E3=83=A1=E3=83=83=E3=82=BB=E3=83=BC=E3=82=B8:
>>>=20
>>>> I've been planning on taking on IP Filter for quite some time.
>>>> Unfortunately I've left my src commit bit lapse (my ports commit =
bit is
>>>> alive and well though) thus I'm looking for a mentor. In addition =
I'm
>>>> working on an ACER WMI/ACPI kld. One mentor would be preferred but =
two
>>>> would be fine too.
>>>=20
>>> What are your plans regarding ipfilter? I remain unconvinced that it
>> should b
>>> e in the base system. Perhaps you can work on it as a port?
>>=20
>> The initial plan was to import IP Filter 5.1.2 into HEAD. darrenr@ =
hadn't
>> done much with IPF while employed with Sun. Since then there has been =
some
>> development that is long overdue for HEAD.
>>=20
>> I'm not sure if I'd MFC it into 9 or not.
>>=20
>> I did consider a port but given it would has to touch bits and pieces =
of
>> the source tree (/usr/src), a port would be messy and the decision =
was made
>> to work on importing it into base.
>>=20
>>>=20
>>> Why do you want to work on something that people have been trying to
>> remove s
>>> ince 2005?
>>=20
>> I and others have been using it in FreeBSD for over decade. For the =
longest
>> of time we'd use a common set of rules across a FreeBSD and Solaris =
farm
>> (using ipfmeta, makefiles, rsync, rdist, and a local CVS repo).
>> Interoperability with other systems which use IP Filter is a plus. If
>> there's a maintainer, it only makes FreeBSD richer. Losing IP Filter =
would
>> be a loss.
>>=20
>>=20
>> --
>> Cheers,
>> Cy Schubert <Cy.Schubert@komquats.com>
>> FreeBSD UNIX:  <cy@FreeBSD.org>   Web:  http://www.FreeBSD.org
>>=20
>>=20
>> _______________________________________________
>> freebsd-current@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-current
>> To unsubscribe, send any mail to =
"freebsd-current-unsubscribe@freebsd.org"
>>=20
>=20
>=20
>=20
> --=20
>=20
> Sam Fourman Jr.
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?D6ADE9C6-868A-4524-A6D7-4EB88F9D6287>