From owner-freebsd-net@FreeBSD.ORG Sun Apr 14 18:31:01 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 3A457999; Sun, 14 Apr 2013 18:31:01 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id F091CCBB; Sun, 14 Apr 2013 18:31:00 +0000 (UTC) Received: from ds4.des.no (smtp.des.no [194.63.250.102]) by smtp-int.des.no (Postfix) with ESMTP id D03578D7A; Sun, 14 Apr 2013 18:30:59 +0000 (UTC) Received: by ds4.des.no (Postfix, from userid 1001) id 82E939260; Sun, 14 Apr 2013 20:30:59 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Odhiambo Washington Subject: Re: ipfilter(4) needs maintainer References: <20130411201805.GD76816@FreeBSD.org> <7D8ACD5C-821D-4505-82E4-02267A7BA4F8@FreeBSD.org> <96D56EAE-E797-429E-AEC9-42B19B048CCC@FreeBSD.org> <516AAD01.1090201@a1poweruser.com> <1D28D213-BB43-4538-A1D5-FC396A7025D5@samsco.org> Date: Sun, 14 Apr 2013 20:30:59 +0200 In-Reply-To: (Odhiambo Washington's message of "Sun, 14 Apr 2013 16:48:36 +0300") Message-ID: <861uadc6cc.fsf@ds4.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org, freebsd-current@freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Apr 2013 18:31:01 -0000 Odhiambo Washington writes: > 2. PF is being felt to be part of FreeBSD, but it too lags far behind > OpenBSD implementation - almost like it's unmaintained. There has been > debates about this which were never concluded. Most of you will agree with > me on this. FreeBSD's version of pf is actively maintained by Gleb. IIUC, the reason why it lags behind OpenBSD is partly that OpenBSD keep making changes to the filter syntax which break existing rulesets, and partly that FreeBSD's and OpenBSD's network stacks and locking primitives are so different that we can't easily plug OpenBSD's code into our kernel without significant performance issues. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no