Re: NetBSD packet filter

[Hector <technet%netdog.org@localhost>]

On 9/28/24 12:56, Emmanuel Nyarko wrote:
> Hi tech-net,
> Emmanuel here.
> I’m currently working on integrating ALTQ in NPF packet filter.
>  From few informations gathered, the community is trying to keep NPF up to date with things in ipf and pf.
> So I am happy to hear from whoever is using pf/ipf or is actively aware of what features npf is missing so we can get NPF very up to date with the desired packet filtering features so we can use that as our primary packet filter.
>
> Happy to hear from lots of you!!


I started this thread in 2020:
https://mail-index.netbsd.org/tech-net/2020/12/16/msg007960.html

I suggest you read the entire thread.

As far as I can tell, in the years since then, that thread has not 
resulted in any action to address the concerns I and a couple of other 
people mentioned.

I also filed a bug report (as suggested by Jason Thorpe):
https://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=55892
There has been no action on this bug report since it was filed 4 years ago.

One of the responses in the tech-net thread said that pf would in fact 
be removed from NetBSD, some day, leaving npf as the only firewall.

The combination of all the above motivated me a year or two ago to 
change my routers to run FreeBSD with pf.