From owner-freebsd-current@FreeBSD.ORG Mon Apr 15 19:48:38 2013 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 8036B2D4; Mon, 15 Apr 2013 19:48:38 +0000 (UTC) (envelope-from jkim@FreeBSD.org) Received: from hammer.pct.niksun.com (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id A5FD816A8; Mon, 15 Apr 2013 19:48:37 +0000 (UTC) Message-ID: <516C58ED.40505@FreeBSD.org> Date: Mon, 15 Apr 2013 15:45:49 -0400 From: Jung-uk Kim User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:17.0) Gecko/20130408 Thunderbird/17.0.5 MIME-Version: 1.0 To: Cy Schubert Subject: Re: ipfilter(4) needs maintainer References: <201304151927.r3FJRtq9002799@slippy.cwsent.com> In-Reply-To: <201304151927.r3FJRtq9002799@slippy.cwsent.com> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Warren Block , Scott Long , "current@freebsd.org" , Chris Rees , Rui Paulo , "net@freebsd.org" , darrenr@freebsd.org, "cpet@sdf.org" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2013 19:48:38 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2013-04-15 15:27:55 -0400, Cy Schubert wrote: > In message , Scott > Long writes: >> >> On Apr 15, 2013, at 11:48 AM, Cy Schubert >> wrote: >> >>> In message <18DF99B0-6E66-4906-A233-7778451B8A92@felyko.com>, >>> Rui Paulo writes: >>>> 2013/04/15 9:55$B!"(BCy Schubert >>>> $B$N%a%C%;!<%8 >> (B: >>>> >>>>> I've been planning on taking on IP Filter for quite some >>>>> time. Unfortunately I've left my src commit bit lapse (my >>>>> ports commit bit is alive and well though) thus I'm looking >>>>> for a mentor. In addition I'm working on an ACER WMI/ACPI >>>>> kld. One mentor would be preferred but two would be fine >>>>> too. >>>> >>>> What are your plans regarding ipfilter? I remain unconvinced >>>> that it shoul >> d b >>>> e in the base system. Perhaps you can work on it as a port? >>> >>> The initial plan was to import IP Filter 5.1.2 into HEAD. >>> darrenr@ hadn't done much with IPF while employed with Sun. >>> Since then there has been some development that is long overdue >>> for HEAD. >>> >>> I'm not sure if I'd MFC it into 9 or not. >>> >>> I did consider a port but given it would has to touch bits and >>> pieces of the source tree (/usr/src), a port would be messy and >>> the decision was made >> >>> to work on importing it into base. >>> >>>> >>>> Why do you want to work on something that people have been >>>> trying to remov >> e s >>>> ince 2005? >>> >>> I and others have been using it in FreeBSD for over decade. For >>> the longest >> >>> of time we'd use a common set of rules across a FreeBSD and >>> Solaris farm (using ipfmeta, makefiles, rsync, rdist, and a >>> local CVS repo). Interoperability with other systems which use >>> IP Filter is a plus. If there's a maintainer, it only makes >>> FreeBSD richer. Losing IP Filter would be a loss. >>> >> >> >> If you're committed to maintaining IPFilter, that's great. >> However, it can't be left to stagger along in a zombie state >> with nothing more than good intentio ns from well meaning people. >> What is your timeline for getting it back into sha pe and >> re-integrating yourself into the committer community? > > I would think this would be my top priority right now. I'd like to > see it at the latest level in HEAD. I would like to MFC to 9-STABLE > at some point. > > Given that IPF already lives in src/contrib and src/sys/contrib, > would the change in License from Darren Reed's own not so BSD > friendly IPF license to GPLv2 be of concern. I recall there was a > lot of concern over IPF's license change at the time. (FreeBSD > moved it to contrib while OpenBSD removed it completely and wrote > PF -- I'm not sure what NetBSD did). FYI, NetBSD has PF from OpenBSD: http://www.netbsd.org/docs/network/pf.html Also, they upgraded it to the latest GPL'ed sources recently (and moved to a different directory): http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/external/bsd/ipf/netinet/?only_with_tag=MAIN Now they have their own packet filter, called NPF: http://mail-index.netbsd.org/netbsd-announce/2012/10/17/msg000161.html They have more choices now. :-) Jung-uk Kim -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQEcBAEBAgAGBQJRbFjtAAoJECXpabHZMqHOSFkIAK72iLtzb1py01/A+SbX8ejn hi5eh8ri6QQ2Kh4K96b/R5oHk5PoGNpc7xX7Kbp1wyJ2OrdNvAPnElwMDpPCjnRC rKPXiS25Km9D1e18E2pLB4iTweb/AOf87bGRz6skm3Rq0D4XOX9dwRndj1vqRxmH V/Rrdlzprx4EvDmgmfAfSZwGTGit6fVXqHHj5LtONURNKe4qAliVIdxB1vQFQBqB BnHF1gN7tIJVCrn+4yKSVsv6vqRSXp5LOIRBw2ooURKEkkKqVIapboEU+pGitN4g dbVZkoBol7V+LfqBBpsG7JH+OboUvdvWJ7hqeNtAV4YerBBBbePvx9D5iehmRUk= =/mAG -----END PGP SIGNATURE-----