From owner-cvs-all@FreeBSD.ORG  Mon Mar  8 20:18:15 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 680)
	id 87A0316A4CF; Mon,  8 Mar 2004 20:18:15 -0800 (PST)
In-Reply-To: <20040226161339.GI46714@madman.celabo.org>
To: "Jacques A. Vidrine" <nectar@FreeBSD.org>
Date: Mon, 8 Mar 2004 20:18:15 -0800 (PST)
X-Mailer: ELM [version 2.4ME+ PL112 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Message-Id: <20040309041815.87A0316A4CF@hub.freebsd.org>
From: darrenr@FreeBSD.ORG (Darren Reed)
cc: Max Laier <mlaier@FreeBSD.org>
cc: Andre Oppermann <andre@freebsd.org>
cc: Tim Robbins <tjr@freebsd.org>
cc: cvs-src@FreeBSD.org
cc: Will Andrews <will@csociety.org>
cc: src-committers@FreeBSD.org
cc: cvs-all@FreeBSD.org
cc: Steve Kargl <sgk@troutmask.apl.washington.edu>
Subject: Re: cvs commit: src/sys/contrib/pf/net if_pflog.c
	if_pflog.hif_pfsync.c src/sys/contrib/pf/netinet in4_cksum.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Mar 2004 04:18:15 -0000

In some mail I received from Jacques A. Vidrine, sie wrote
> On Thu, Feb 26, 2004 at 11:09:07AM -0500, Will Andrews wrote:
> > It doesn't work on Linux.  That is a pretty big gap.
> 
> Funny you should mention that: Both IPFilter and PF are being actively
> ported to Linux.

The next release of IPFilter (4.1.1) will have it mostly working
on Linux 2.4 kernels.  The problems that remain have to do with
inadequacies in the Linux kernel API for support of features that
are not part of people's core use.  As of 4.1, it was doing all
the simple stuff (block/pass/log.)

I imagine that my work here will make it easier for others to
do a copy to support their own projects...

ipf is found in the current server version of OS-X, but ipfw is
used on the workstation.  Go figure :)

Darren