Re: Why so many packet filters?

[Malcolm Herbert <mjch%mjch.net@localhost>]

On Mon, Aug 15, 2016 at 09:13:46AM +0200, Joerg Sonnenberger wrote:
|On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote:
|> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't
|> well maintained nowadays?
|
|While they are not maintained, PF works quite well for the feature set
|our version has. There are still quite a few issues with NPF, primarily
|documentation issues, but also some functional ones. It seems a bit
|premature to deprecate IPF and PF in the current situation. That said,
|they should certainly be considered legacy functionality.

+1 for keeping pf in at least - I tend to prefer the functionality of
the tools around pf rather than ipf ... I haven't yet tried npf, so that
may sway me away from pf

Regards,
Malcolm

-- 
Malcolm Herbert
mjch%mjch.net@localhost