OpenBSD Packet Filter Ported to NetBSD

    Date27 Jun 2003
    CategoryFirewalls
    4395
    Posted ByAnthony Pell
    NetBSD's itojun has ported PF (openbsd packet filter) to netbsd-current as of today as a patch. He says that presently it does not support (interface) syntax and ip_off/ip_len endian flipping needs testing. His ultimate goal is to replace ipsec policy engine . . . NetBSD's itojun has ported PF (openbsd packet filter) to netbsd-current as of today as a patch. He says that presently it does not support (interface) syntax and ip_off/ip_len endian flipping needs testing. His ultimate goal is to replace ipsec policy engine by PF tagging (just like ALTQ integration to PF on openbsd). Syslogging is supported by pflog(8). He is also unsure if the goal would be to replace ipfilter, or have pf be an alternative. He says that freebsd has 2 packet filters (or 3?) shipped with it and has no problem, hence both could be shipped simultaneously. But ipfilter and PF have very similar syntax, so we could choose to replace ipfilter with PF. itojun is a member of the NetBSD Core Group. Joel Wilsson had also started the pf migration efforts and hopefully itojun and Joel can pool their efforts together as a team!
    You are not authorised to post comments.

    LinuxSecurity Poll

    Has your email account ever been pwned in a data breach?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /component/communitypolls/?task=poll.vote
    12
    radio
    [{"id":"53","title":"Yes","votes":"8","type":"x","order":"1","pct":88.89,"resources":[]},{"id":"54","title":"No","votes":"1","type":"x","order":"2","pct":11.11,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.