Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 20 Jul 2014 14:40:37 -0700
From:      Lyndon Nerenberg <lyndon@orthanc.ca>
To:        Daniel Feenberg <feenberg@nber.org>
Cc:        FreeBSD current <freebsd-current@freebsd.org>, FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: Future of pf / firewall in FreeBSD ? - does it have one ?
Message-ID:  <EB88BD02-63EC-402D-91EA-9723216C912E@orthanc.ca>
In-Reply-To: <alpine.LRH.2.11.1407201430030.2748@nber7.nber.org>
References:  <53C706C9.6090506@com.jkkn.dk> <20140718110645.GN87212@FreeBSD.org> <20140718151255.b3e677d9.gerrit.kuehn@aei.mpg.de> <CALfReycHtSi5GXgFZihrTsgDG6wc-ZfkYmQu7AjQmOKdeXntrA@mail.gmail.com> <CAEeRwNV3bJrM5KrGObZtNvSY1mVMW9jz2M4t2m2SSq_vvWmZ5w@mail.gmail.com> <CALfReyfWJd7YOi_Y8Mq=Q-xndLueF7vU5xwc1w_YGyM1a9DQZA@mail.gmail.com> <53CA2D39.6000204@sasktel.net> <CALfReyfkZY1ZDNohP6npRVQfjBK2M6j59R8idUGazr1yJDX3Jg@mail.gmail.com> <20140720123916.GV96250@e-new.0x20.net> <alpine.LRH.2.11.1407201430030.2748@nber7.nber.org>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]

On Jul 20, 2014, at 11:35 AM, Daniel Feenberg <feenberg@nber.org> wrote:

> Rather they have said "An updated pf would not be
> suitable, as it would be incompatible with existing configuration files".

A major FreeBSD version increment is allowed to break that level of backwards compatibility.  Nothing prevents this from being incorporated into 11.x.

The only real concern would be removing existing core functionality as part of the update.  For that you want to provide at least one major release cycle for people up migrate.  Comparing pf on my current OpenBSD machines vs. the FreeBSD 10.x pf, that doesn't seem to be an issue.

--lyndon


[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
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=Wq6E
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?EB88BD02-63EC-402D-91EA-9723216C912E>