From owner-freebsd-net@FreeBSD.ORG Sun Apr 14 20:33:23 2013 Return-Path: Delivered-To: net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id E00EB5AC; Sun, 14 Apr 2013 20:33:23 +0000 (UTC) (envelope-from rpaulo@FreeBSD.org) Received: from felyko.com (felyko.com [IPv6:2607:f2f8:a528::3:1337:ca7]) by mx1.freebsd.org (Postfix) with ESMTP id CE42FFA; Sun, 14 Apr 2013 20:33:23 +0000 (UTC) Received: from [IPv6:2601:9:4d00:3c:3169:d5a4:db0a:888b] (unknown [IPv6:2601:9:4d00:3c:3169:d5a4:db0a:888b]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by felyko.com (Postfix) with ESMTPSA id CC1533981E; Sun, 14 Apr 2013 13:33:22 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) Subject: Re: ipfilter(4) needs maintainer From: Rui Paulo In-Reply-To: <201304141911.r3EJBMOb084882@mech-cluster241.men.bris.ac.uk> Date: Sun, 14 Apr 2013 13:33:21 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <9ED46F7A-8A5A-4668-8B00-D58278C9A0DA@FreeBSD.org> References: <201304141911.r3EJBMOb084882@mech-cluster241.men.bris.ac.uk> To: mexas@bristol.ac.uk X-Mailer: Apple Mail (2.1503) Cc: scottl@samsco.org, current@FreeBSD.org, net@FreeBSD.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Apr 2013 20:33:24 -0000 On 2013/04/14, at 12:11, Anton Shterenlikht wrote: > A migration *guide*, yes. Tools to convert one syntax to = another: no. >=20 > ok, so what is the brief migraiton advice? It's still being written. > The Handbook mentions PF and IPFW. > I gather from your mails that PF is the recommended choice. > Is that so? Yes, because of how much easier it is to convert from ipf to pf version = ipf to ipfw. > If I choose PF, can I just follow the > Handbook PF section, and once it's working, > remove all IPF related kernel options and config > files? Yes, that will be the plan. Regards, -- Rui Paulo