Date: Sun, 27 Jan 2002 16:19:51 -0800 From: "Crist J. Clark" <cristjc@earthlink.net> To: "M. Warner Losh" <imp@village.org> Cc: jacks@sage-american.com, nate@yogotech.com, stable@FreeBSD.ORG Subject: Re: Firewall config non-intuitiveness Message-ID: <20020127161951.A27080@blossom.cjclark.org> In-Reply-To: <20020127.102748.70374201.imp@village.org>; from imp@village.org on Sun, Jan 27, 2002 at 10:27:48AM -0700 References: <20020127014848.F23259@blossom.cjclark.org> <20020127.052626.107682843.imp@village.org> <3.0.5.32.20020127075816.01831ca0@mail.sage-american.com> <20020127.102748.70374201.imp@village.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jan 27, 2002 at 10:27:48AM -0700, M. Warner Losh wrote:
[snip]
> Right now what I have works. You are changing the semantics of a
> security related feature of the system in such a way that after this
> change what I have will not work. I agree that your work around will
> allow me to easily correct things. However, if I fail to do so, I
> open my firewall up completely. To me, that's an unacceptible change
> in the API.
I agree that changing this in -STABLE may be too much of a disruption
in the API. It may be too late. That's why I think this discussion
has been necessary.
However, changing the behavior in -CURRENT... That's a whole different
issue (but not really a topic for this list).
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020127161951.A27080>