Date: Tue, 8 Apr 2025 09:55:01 +0800 From: Zhenlei Huang <zlei@FreeBSD.org> To: Robert Austen <robert.austen@willowglensystems.com> Cc: "freebsd-current@freebsd.org" <freebsd-current@freebsd.org>, "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>, Kristof Provost <kp@FreeBSD.org> Subject: Re: pfil_default_to_drop Message-ID: <274BB159-3CB5-49E0-84E7-A3F4B81BFDC1@FreeBSD.org> In-Reply-To: <YT2PPFD8040D4DADEDA66317A6B3E7928C9EFAA2@YT2PPFD8040D4DA.CANPRD01.PROD.OUTLOOK.COM> References: <YT2PPFD8040D4DA15FF1002CDBF5DE22C41EFAA2@YT2PPFD8040D4DA.CANPRD01.PROD.OUTLOOK.COM> <YT2PPFD8040D4DA456DB44A9D2934D49D21EFAA2@YT2PPFD8040D4DA.CANPRD01.PROD.OUTLOOK.COM> <YT2PPFD8040D4DADEDA66317A6B3E7928C9EFAA2@YT2PPFD8040D4DA.CANPRD01.PROD.OUTLOOK.COM>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_3490E1A7-EF10-4B15-9949-3A6A0A9A09FD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii > On Apr 8, 2025, at 6:36 AM, Robert Austen = <robert.austen@willowglensystems.com> wrote: >=20 >=20 >=20 > From: Robert Austen <robert.austen@willowglensystems.com = <mailto:robert.austen@willowglensystems.com>> > Sent: April 7, 2025 4:33 PM > To: freebsd-current@freebsd.org <mailto:freebsd-current@freebsd.org> = <freebsd-current@freebsd.org <mailto:freebsd-current@freebsd.org>>; = freebsd-net@freebsd.org <mailto:freebsd-net@freebsd.org> = <freebsd-net@freebsd.org <mailto:freebsd-net@freebsd.org>> > Subject: Fw: pfil_default_to_drop > =20 >=20 > From: Robert Austen > Sent: April 7, 2025 4:21 PM > To: freebsd-current@freebsd.org <mailto:freebsd-current@freebsd.org> = <freebsd-current@freebsd.org <mailto:freebsd-current@freebsd.org>> > Subject: pfil_default_to_drop > =20 > Hello, > I've been playing with FreeBSD and PF to build myself a new firewall, = as Open/FreeBSD + PF seems to be a common starting point. >=20 > I've noticed a number of people asking questions about = PF_DEFAULT_TO_DROP and the like, with the observations that it's hard > to ensure that packets all default to drop if the rule file(s) for = whatever reason fail to load.=20 Hi Robert, So why not defining the compile option PF_DEFAULT_TO_DROP, and preload = pf.ko ( via the loader(8), /boot/loader.conf ) ? With 13.5, or upcoming 14.3 ( you can also experiment latest stable/14 = ), you can turn the loader tunable net.pf.default_to_drop to 1, and = preload pf.ko. See also = https://cgit.freebsd.org/src/commit/?id=3Dc531c1d1462c45f7ce5de4f991322680= 1f3073bd = <https://cgit.freebsd.org/src/commit/?id=3Dc531c1d1462c45f7ce5de4f99132268= 01f3073bd> . >=20 > After looking thru the online documentation, forums and scripts, I = came to the conclusion that it's not a PF problem or IPFW etc > or really a problem with any of the filters or scripts, the problem is = at the level of PFIL, the kernel packet filtering code: If no > filter is loaded, i.e. if the heads are unhooked, then PFIL sends = everything thru to its destination. So my thought=20 > was to add an option PFIL_DEFAULT_TO_DROP (in essence a PFIL version = of PF_DEFAULT_TO_DROP) that drops all the > IPv4 and IPv6 packets that would otherwise go thru the = yet-to-be-loaded chosen filter (PF or whatever) at any given time the=20 > hooks are unhooked.=20 If no firewalls loaded, then the system should behave as is. I do not = think PFIL_DEFAULT_TO_DROP is the right way to handle your case. >=20 > [No one filters on local loopback nor the link layer, so I've left = those hooks untouched. I suppose one could add them, > maybe PFIL_DEFAULT_LOCAL_TO_DROP or PFIL_DEFAULT_LINK_TO_DROP, but I = doubt there's much demand for it.] >=20 > Normally I'm an embedded linux kernel basher. > I'm not entirely sure where to send this patch. Most of the threads = asking the above PF questions are closed to changes, > so that doesn't seem a good place. Sir Dice seems to be a common = answerer of questions; I would have sent it to him/her=20 > if I could... >=20 > I'm not a user of GIT, so I'm not sure how to submit a "GIT formatted = patch"... > I've simply diff -rdpNU 5 a copy of the @old folder with a copy of = @new folder. The code was written against FreeBSD-14.1-RELEASE-amd64, > but I suspect the kernel code in the networking core doesn't change = much from platform to platform, or version to version. >=20 > But it works, it's pretty simple, pretty small and so just in case it = might be useful, I'm passing it along. >=20 > thanks! >=20 >=20 > Robert >=20 >=20 >=20 >=20 > <FreeBSD-14.1-RELEASE-amd64-pfil_default_to_drop.patch.zip> --Apple-Mail=_3490E1A7-EF10-4B15-9949-3A6A0A9A09FD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">On Apr 8, 2025, at 6:36 AM, Robert Austen <<a = href=3D"mailto:robert.austen@willowglensystems.com" = class=3D"">robert.austen@willowglensystems.com</a>> wrote:</div><br = class=3D"Apple-interchange-newline"><div class=3D""><meta = charset=3D"UTF-8" class=3D""><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D""><br class=3D"Apple-interchange-newline"><br = class=3D""></div><div id=3D"appendonsend" style=3D"caret-color: rgb(0, = 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none;" class=3D""></div><hr style=3D"caret-color: = rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; display: inline-block; width: 576.234375px;" = class=3D""><span style=3D"caret-color: rgb(0, 0, 0); font-family: = Helvetica; font-size: 13px; font-style: normal; font-variant-caps: = normal; font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; float: none; display: inline !important;" class=3D""></span><div = dir=3D"ltr" id=3D"divRplyFwdMsg" style=3D"caret-color: rgb(0, 0, 0); = font-family: Helvetica; font-size: 13px; font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none;" class=3D""><span style=3D"font-family: Calibri, = sans-serif; font-size: 11pt;" class=3D""><b = class=3D"">From:</b> Robert Austen <<a = href=3D"mailto:robert.austen@willowglensystems.com" = class=3D"">robert.austen@willowglensystems.com</a>><br class=3D""><b = class=3D"">Sent:</b> April 7, 2025 4:33 PM<br class=3D""><b = class=3D"">To:</b> <a href=3D"mailto:freebsd-current@freebsd.org" = class=3D"">freebsd-current@freebsd.org</a><span = class=3D"Apple-converted-space"> </span><<a = href=3D"mailto:freebsd-current@freebsd.org" = class=3D"">freebsd-current@freebsd.org</a>>;<span = class=3D"Apple-converted-space"> </span><a = href=3D"mailto:freebsd-net@freebsd.org" = class=3D"">freebsd-net@freebsd.org</a><span = class=3D"Apple-converted-space"> </span><<a = href=3D"mailto:freebsd-net@freebsd.org" = class=3D"">freebsd-net@freebsd.org</a>><br class=3D""><b = class=3D"">Subject:</b> Fw: pfil_default_to_drop</span><div = class=3D""> </div></div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = id=3D"x_appendonsend" style=3D"caret-color: rgb(0, 0, 0); font-family: = Helvetica; font-size: 13px; font-style: normal; font-variant-caps: = normal; font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none;" class=3D""></div><hr style=3D"caret-color: rgb(0, 0, 0); = font-family: Helvetica; font-size: 13px; font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; display: inline-block; width: = 576.234375px;" class=3D""><span style=3D"caret-color: rgb(0, 0, 0); = font-family: Helvetica; font-size: 13px; font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; float: none; display: inline !important;" = class=3D""></span><div dir=3D"ltr" id=3D"x_divRplyFwdMsg" = style=3D"caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: = 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; = letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none;" class=3D""><span = style=3D"font-family: Calibri, sans-serif; font-size: 11pt;" class=3D""><b= class=3D"">From:</b> Robert Austen<br class=3D""><b = class=3D"">Sent:</b> April 7, 2025 4:21 PM<br class=3D""><b = class=3D"">To:</b> <a href=3D"mailto:freebsd-current@freebsd.org" = class=3D"">freebsd-current@freebsd.org</a><span = class=3D"Apple-converted-space"> </span><<a = href=3D"mailto:freebsd-current@freebsd.org" = class=3D"">freebsd-current@freebsd.org</a>><br class=3D""><b = class=3D"">Subject:</b> pfil_default_to_drop</span><div = class=3D""> </div></div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">Hello,</div><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">I've been playing with FreeBSD and PF to = build myself a new firewall, as Open/FreeBSD + PF seems to be a common = starting point.</div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">I've noticed a = number of people asking questions about PF_DEFAULT_TO_DROP and the like, = with the observations that it's hard</div><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">to ensure that packets all default to drop = if the rule file(s) for whatever reason fail to = load. </div></div></blockquote><div><br class=3D""></div><div>Hi = Robert,</div><div><br class=3D""></div><div>So why not defining the = compile option PF_DEFAULT_TO_DROP, and preload <span = style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=3D"">pf.ko= ( via the loader(8), </span><span style=3D"caret-color: rgb(0, 0, = 0); color: rgb(0, 0, 0);" class=3D"">/boot/loader.conf ) = ?</span></div><div><span style=3D"caret-color: rgb(0, 0, 0); color: = rgb(0, 0, 0);" class=3D""><br class=3D""></span></div><div><font = color=3D"#000000" class=3D"">With 13.5, or upcoming 14.3 ( you can = also experiment latest stable/14 ), you can </font><span = style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=3D"">turn = the loader tunable net.pf.default_to_drop to 1, = and </span><span style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, = 0, 0);" class=3D"">preload </span><span style=3D"caret-color: = rgb(0, 0, 0); color: rgb(0, 0, 0);" class=3D"">pf.ko.</span></div><div>See= also <a = href=3D"https://cgit.freebsd.org/src/commit/?id=3Dc531c1d1462c45f7ce5de4f9= 913226801f3073bd" = class=3D"">https://cgit.freebsd.org/src/commit/?id=3Dc531c1d1462c45f7ce5de= 4f9913226801f3073bd</a> .</div><div><br class=3D""></div><blockquote = type=3D"cite" class=3D""><div class=3D""><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">After looking thru = the online documentation, forums and scripts, I came to the conclusion = that it's not a PF problem or IPFW etc</div><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">or really a problem with any of the filters = or scripts, the problem is at the level of PFIL, the kernel packet = filtering code: If no</div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">filter is loaded, i.e. if the heads are = unhooked, then PFIL sends<span = class=3D"Apple-converted-space"> </span><b = class=3D"">everything</b> thru to its destination. So my = thought </div><div style=3D"font-style: normal; font-variant-caps: = normal; font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D"">was to add an option PFIL_DEFAULT_TO_DROP (in essence a PFIL = version of PF_DEFAULT_TO_DROP) that drops all the</div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">IPv4 and IPv6 = packets that would otherwise go thru the yet-to-be-loaded chosen filter = (PF or whatever) at any given time the </div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">hooks are = unhooked. </div></div></blockquote><div><br class=3D""></div><div>If = no firewalls loaded, then the system should behave as is. I do not = think PFIL_DEFAULT_TO_DROP is the right way to handle your = case.</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div style=3D"font-style: normal; font-variant-caps: normal; = font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D""><br class=3D""></div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">[No one filters on local loopback nor the = link layer, so I've left those hooks untouched. I suppose one could add = them,</div><div style=3D"font-style: normal; font-variant-caps: normal; = font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D"">maybe PFIL_DEFAULT_LOCAL_TO_DROP or = PFIL_DEFAULT_LINK_TO_DROP, but I doubt there's much demand for = it.]</div><div style=3D"font-style: normal; font-variant-caps: normal; = font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D""><br class=3D""></div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">Normally I'm an embedded linux kernel = basher.</div><div style=3D"font-style: normal; font-variant-caps: = normal; font-weight: 400; letter-spacing: normal; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = text-align: left; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D"">I'm not entirely sure where to send this patch. Most of the = threads asking the above PF questions are closed to changes,</div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; text-align: left; margin: 0px; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">so that doesn't seem = a good place. Sir Dice seems to be a common answerer of questions; I = would have sent it to him/her </div><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; text-align: left; margin: 0px; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">if I could...</div><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; text-align: left; margin: 0px; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">I'm not a user of = GIT, so I'm not sure how to submit a "GIT formatted patch"...</div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">I've simply diff = -rdpNU 5 a copy of the @old folder with a copy of @new folder. The code = was written against FreeBSD-14.1-RELEASE-amd64,</div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">but I suspect the = kernel code in the networking core doesn't change much from platform to = platform, or version to version.</div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; text-align: left; margin: 0px; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; text-align: left; margin: 0px; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">But it works, it's = pretty simple, pretty small and so just in case it might be useful, I'm = passing it along.</div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; text-align: left; margin: 0px; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; text-align: left; margin: 0px; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D"">thanks!</div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; text-align: left; margin: 0px; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D""><br = class=3D""></div><div style=3D"font-style: normal; font-variant-caps: = normal; font-weight: 400; letter-spacing: normal; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; direction: ltr; = text-align: left; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D""><br class=3D""></div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; text-align: left; margin: 0px; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D"">Robert</div><div style=3D"font-style: = normal; font-variant-caps: normal; font-weight: 400; letter-spacing: = normal; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><div = style=3D"font-style: normal; font-variant-caps: normal; font-weight: = 400; letter-spacing: normal; text-indent: 0px; text-transform: none; = white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; text-align: left; margin: 0px; = font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, = Helvetica, sans-serif; font-size: 12pt;" class=3D""><br = class=3D""></div><div style=3D"font-style: normal; font-variant-caps: = normal; font-weight: 400; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, = Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;" = class=3D""><br class=3D""></div><div style=3D"font-style: normal; = font-variant-caps: normal; font-weight: 400; letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; = text-decoration: none; direction: ltr; font-family: Aptos, = Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; = font-size: 12pt;" class=3D""><br class=3D""></div><span = id=3D"cid:EF978BA5-1323-4E87-B14E-03A449683C8A"><FreeBSD-14.1-RELEASE-a= md64-pfil_default_to_drop.patch.zip></span></div></blockquote></div><br= class=3D""><div class=3D""> <div><br class=3D""></div> </div> <br class=3D""></body></html>= --Apple-Mail=_3490E1A7-EF10-4B15-9949-3A6A0A9A09FD--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?274BB159-3CB5-49E0-84E7-A3F4B81BFDC1>