Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Sep 2011 09:05:47 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Modulok <modulok@gmail.com>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: How to find out which version of PF a given box is using...
Message-ID:  <4E799ADB.2090301@infracaninophile.co.uk>
In-Reply-To: <4E799390.2040303@infracaninophile.co.uk>
References:  <CAN2%2BEpaTSLwpP-LTfQzoXHfxvTvJ3mHs=aqKAGtNeV8BtQ83sQ@mail.gmail.com> <4E799390.2040303@infracaninophile.co.uk>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
On 21/09/2011 08:34, Matthew Seaman wrote:
> On 21/09/2011 07:34, Modulok wrote:
>> Is there an easy way to find out what version of PF a given FreeBSD version is
>> using? Currently I'm doing this:
>>
>>     grep -iE '\bpf\b' /usr/src/UPDATING
>>
>> Just wondering if I'm missing something. I didn't see any '--version'
>> flag in pfctl.
> 
> Uh -- bpf is a different thing to PF.  bpf is Berkeley Packet Filter
> which isn't anything to do with firewalling, but used eg. by tcpdump to
> select certain packets from the wire.  As far as I know, bpf doesn't
> have a separate version number; it just uses the OS version number.
> It's been part of BSD Unices since dinosaurs roamed the earth.

One of these days I'll learn not to send e-mail before coffee.  Please
ignore the above -- red herring.

> PF is the firewalling code imported from OpenBSD.  Again, it's part of
> the base system in OpenBSD so it just uses the OpenBSD version number.
> Every so often there will be a new import from OpenBSD -- I believe most
> released versions of FreeBSD are using PF from OpenBSD 4.2, but there is
> an update to OpenBSD 4.mumble in the works for the upcoming FreeBSD 9.0
> release.  You'ld have to check the commit history in CVS or SVN to be sure.

In fact, the last import listed as such in the CVS history was from
OpenBSD 4.1 but that was around 2007 when FreeBSD was on version 6.x --
long time ago.  There's been plenty of updates since (which, IIRC, made
the FreeBSD code pretty much equivalent to what is in OpenBSD 4.2), but
no wholesale reimport until about 2 months ago, when OpenBSD 4.5 code
was imported into head.

http://svnweb.freebsd.org/base?view=revision&revision=223637

AFAIK, that is not a candidate for MFC to stable/8 or earlier, as it
modifies KBIs.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
JID: matthew@infracaninophile.co.uk               Kent, CT11 9PW


[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk55muIACgkQ8Mjk52CukIwBQgCeI033ZPnZhPuzCn858sqZOAol
85cAn3a3KWmKILG7GrUrtC1JHHZKfxM2
=vWYm
-----END PGP SIGNATURE-----
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4E799ADB.2090301>