Subject: Re: PF for netbsd
To: Ronald van der Pol <Ronald.vanderPol@rvdp.org>
From: None <itojun@iijlab.net>
List: tech-net
Date: 06/27/2003 12:26:29
>> ftp://ftp.kame.net/pub/kame/misc/netbsd-pf-20030626.diff
>> has PF (openbsd packet filter) for netbsd-current as of today.
new version, 20030627.diff, is available. (replace date portion)
>> caveats:
>> - does not support (interface) syntax
it seems that (interface) syntax has some issues - namely it does not
handle multiple address on a single interface. it needs some
clarification.
- can't get gid in user{} syntax
because netbsd struct socket does not keep it
other than that, it is working quite stably. userland tools are not
included but are of course available and running.
i would like to commit it, and at the same time update ALTQ to the
latest (which uses PF as packet classifier). integration with IPsec
policy engine is still in the works.
itojun