Subject: Re: PF for netbsd
To: Ronald van der Pol <Ronald.vanderPol@rvdp.org>
From: None <itojun@iijlab.net>
List: tech-net
Date: 06/27/2003 12:26:29
>> 	ftp://ftp.kame.net/pub/kame/misc/netbsd-pf-20030626.diff
>> 	has PF (openbsd packet filter) for netbsd-current as of today.

	new version, 20030627.diff, is available. (replace date portion)

>> 	caveats:
>> 	- does not support (interface) syntax

	it seems that (interface) syntax has some issues - namely it does not
	handle multiple address on a single interface.  it needs some
	clarification.

	- can't get gid in user{} syntax
		because netbsd struct socket does not keep it

	other than that, it is working quite stably.  userland tools are not
	included but are of course available and running.

	i would like to commit it, and at the same time update ALTQ to the
	latest (which uses PF as packet classifier).  integration with IPsec
	policy engine is still in the works.

itojun