Re: Is pf usable on an RPI 3B at this point?

[coypu%SDF.ORG@localhost]

On Sun, Jan 22, 2017 at 09:39:20PM -0500, Alan Corey wrote:
> I've tried a few versions but not pf.  I've a mostly OpenBSD
> background so I've used pf.  I'd like to tether a phone to a Pi over
> rndis/USB then use pf to set up a better AP than the phone's WiFi
> gives, also connect it to my wired network.  I'd need to pick up
> another Pi, both of my 3Bs are fairly busy.
> 

using pf in NetBSD is somewhat discouraged -- it's a very outdated
version of OpenBSD pf, and is disabled by default for all archs,
not just ARM.

If you don't have any preference, it's a better choice to use npf.
ARM kernels set securelevel, so you need to load npf & bpfjit at boot
(you can't do it after boot).
add to /etc/modules.conf:
bpfjit
npf

and don't forget to set net.inet.ip.forwarding=1 (also inet6.ip6)