From owner-freebsd-net@FreeBSD.ORG Tue Oct 19 04:28:18 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C829E1065672; Tue, 19 Oct 2010 04:28:18 +0000 (UTC) (envelope-from max@laiers.net) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.17.9]) by mx1.freebsd.org (Postfix) with ESMTP id 587F58FC19; Tue, 19 Oct 2010 04:28:18 +0000 (UTC) Received: from [192.168.8.46] (75-147-189-33-Washington.hfc.comcastbusiness.net [75.147.189.33]) by mrelayeu.kundenserver.de (node=mrbap1) with ESMTP (Nemesis) id 0Lxdhj-1ObXv62Jyt-016lu0; Tue, 19 Oct 2010 06:15:41 +0200 Message-ID: <4CBD1B68.2040502@laiers.net> Date: Mon, 18 Oct 2010 21:15:36 -0700 From: Max Laier User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.9) Gecko/20100915 Thunderbird/3.1.4 MIME-Version: 1.0 To: Brandon Gooch References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Provags-ID: V02:K0:4SeBd2kN+fgjDDcdyFek/rwEAZKAo3N7v2mi29fXk00 TPZfZSo4oscCqSxp+h+HFHwH7TMyGU83bDG4RisOoVWvYERtF4 15zh0KYDgAeBhrCNdabA/E+hcYDYk4++q7rJzE53OwdpA6M6b4 RWi4J+1h5y/DyW7yw8nEvRBKOGtUqBKq2bI0RbsfBBnhqrApLW S9B+A+gdvrp9mXjtaHe8Q== Cc: =?ISO-8859-1?Q?Ermal_Lu=E7i?= , freebsd-net , freebsd-pf@freebsd.org Subject: Re: [PATCH] pf(4) patch from OpenBSD 4.5 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Oct 2010 04:28:19 -0000 On 18.10.2010 20:16, Brandon Gooch wrote: > On Mon, Oct 18, 2010 at 1:10 PM, Ermal Luçi wrote: >> Hello, >> >> the link http://people.freebsd.org/~eri/pf45_1.diff has the patch for >> pf(4) as of OpenBSD 4.5 version. >> The patch is against HEAD. >> After OpenBSD 4.5 the syntax has changed and this is the reason for >> such an 'old' version patch. >> >> After importing this one the work will go on the newest version and >> decisions on it will than be done. >> >> Be aware that this patch has even support for VIMAGE/VNET. >> It will enable you to run pf(4) with[in] jails+vnets or just vnets >> themselves with separate rulesets >> and policies. >> pfsync(4) can be loaded as a module also with this patch. >> >> Feedback is very welcome. > > Should this compile against HEAD, because I think we're missing a header: > > brandon@x300:~$ cd /usr/src > brandon@x300:/usr/src$ patch< ~/pf45_1.diff $ patch -p0 < ~/pf45_1.diff > brandon@x300:/usr/src$ cd /usr/src/sys/modules/pf > brandon@x300:modules/pf$ sudo make Regards, Max