From owner-freebsd-net@FreeBSD.ORG Mon Apr 15 19:55:55 2013 Return-Path: Delivered-To: net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 905EC520; Mon, 15 Apr 2013 19:55:55 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from cell.glebius.int.ru (glebius.int.ru [81.19.69.10]) by mx1.freebsd.org (Postfix) with ESMTP id 1BF1616F3; Mon, 15 Apr 2013 19:55:54 +0000 (UTC) Received: from cell.glebius.int.ru (localhost [127.0.0.1]) by cell.glebius.int.ru (8.14.6/8.14.6) with ESMTP id r3FJtiRO001999; Mon, 15 Apr 2013 23:55:44 +0400 (MSK) (envelope-from glebius@FreeBSD.org) Received: (from glebius@localhost) by cell.glebius.int.ru (8.14.6/8.14.6/Submit) id r3FJtiq6001998; Mon, 15 Apr 2013 23:55:44 +0400 (MSK) (envelope-from glebius@FreeBSD.org) X-Authentication-Warning: cell.glebius.int.ru: glebius set sender to glebius@FreeBSD.org using -f Date: Mon, 15 Apr 2013 23:55:44 +0400 From: Gleb Smirnoff To: Cy Schubert Subject: Re: ipfilter(4) needs maintainer Message-ID: <20130415195544.GY76816@FreeBSD.org> References: <18DF99B0-6E66-4906-A233-7778451B8A92@felyko.com> <201304151748.r3FHmhC3002734@slippy.cwsent.com> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline In-Reply-To: <201304151748.r3FHmhC3002734@slippy.cwsent.com> User-Agent: Mutt/1.5.21 (2010-09-15) Cc: Warren Block , Scott Long , "current@freebsd.org" , Chris Rees , Rui Paulo , "net@freebsd.org" , "cpet@sdf.org" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2013 19:55:55 -0000 Cy, good news that you volunteered to work on this! On Mon, Apr 15, 2013 at 10:48:43AM -0700, Cy Schubert wrote: C> The initial plan was to import IP Filter 5.1.2 into HEAD. darrenr@ hadn't C> done much with IPF while employed with Sun. Since then there has been some C> development that is long overdue for HEAD. The problem is that v5.1.2 is under GPL. I'm afraid we should update to v4.1.34 only, and then stick to it. So the nearest TODO list is smth like: - update to v4.1.34 - cleanse old kernel APIs (timeout(9) at least) - fix VIMAGE - review open PRs (some might should be closed) - since we do not expect more imports, may be cleanse non-FreeBSD stuff from there? - maybe move it into sys/netpfil? Need to consult imp@ on that. License is very closed to BSD, but has some additions. C> I'm not sure if I'd MFC it into 9 or not. This is up to you, but be adviced that head already differs from stable/9, for example network stack is entirely in network byte order. So merging would require a lot of attention and testing. C> I did consider a port but given it would has to touch bits and pieces of C> the source tree (/usr/src), a port would be messy and the decision was made C> to work on importing it into base. Port isn't an option. IPFilter is too close to many kernel APIs, that can change quickly. -- Totus tuus, Glebius.