Re: Is pf usable on an RPI 3B at this point?

[Alan Corey <alan01346%gmail.com@localhost>]

Thanks, just wondering.  From OpenBSD I seem to remember it was partly
in the kernel but that may have been the ip forwarding.  That would
have been about 2005.  Back then custom OpenBSD kernels were supported
and I thought you had to enable something when configuring if you were
using pf.  I don't think it could be used under Linux at all.  The
syntax has all been changed around anyway.  In OpenBSD it's installed
and running by default but configured to pass everything.

On 2/3/17, coypu%sdf.org@localhost <coypu%sdf.org@localhost> wrote:
> On Sun, Jan 22, 2017 at 09:39:20PM -0500, Alan Corey wrote:
>> I've tried a few versions but not pf.  I've a mostly OpenBSD
>> background so I've used pf.  I'd like to tether a phone to a Pi over
>> rndis/USB then use pf to set up a better AP than the phone's WiFi
>> gives, also connect it to my wired network.  I'd need to pick up
>> another Pi, both of my 3Bs are fairly busy.
>>
>
> using pf in NetBSD is somewhat discouraged -- it's a very outdated
> version of OpenBSD pf, and is disabled by default for all archs,
> not just ARM.
>
> If you don't have any preference, it's a better choice to use npf.
> ARM kernels set securelevel, so you need to load npf & bpfjit at boot
> (you can't do it after boot).
> add to /etc/modules.conf:
> bpfjit
> npf
>
> and don't forget to set net.inet.ip.forwarding=1 (also inet6.ip6)
>


-- 
-------------
No, I won't  call it "climate change", do you have a "reality problem"? - AB1JX
Impeach  Impeach  Impeach  Impeach  Impeach  Impeach  Impeach  Impeach