Current-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: pf in GENERIC

On Wed, Nov 19, 2008 at 06:00:58PM +0200, Cem Kayali wrote:
> I've been using pf and pflogd enabled kernels and pf for about a year on  
> both i386 amd64 systems, and havent see any problem... though i have  
> simple pf rules.
> Regards,
> Cem
> Dave B, 11/19/08 16:41:
>>   I don't know the answer to why it's not enabled by default;
>> although I seem to recall reading on the lists that there were
>> problems, historically at least, with pf's interaction with other
>> subsystems--when statically compiled into the kernel.  As an
>> lkm(4), however, pf works well.


As I recall, when I upgraded my gw to 4.0, I put ipf and pf statically
in my custom kernel to facilitate a transition from one to the other.
However it turns out ipnat would not work at all with pf in the kernel
forcing me to switch at once. Using only pf works (you may not even have
to ipf -D).

My memory is a little hazy on the details though. I suspect it's also true
for ipf firewalling rules.


Staffan Thomen 1024D/7C7E2EF8
Sed quis custodiet ipsos Custodes?

Attachment: pgpiimnvpEMQj.pgp
Description: PGP signature

Home | Main Index | Thread Index | Old Index