Updating PF to OpenBSD Release 4,1

Dunceor dunceor at gmail.com
Thu Jun 10 05:31:50 PDT 2010

On Thu, Jun 10, 2010 at 11:55 AM, Jan Lentfer <Jan.Lentfer at web.de> wrote:
> I have made some progress on the PF work. pf.ko can be loaded and unloaded
> (now even w/o panic, thanks to Aggelos) and I have updated pfctl to the
> version that comes with OpenBSD 4.1. So you can enable PF, load rules and
> view then and so on. All that works.
> What doesn't work at all at the moment is the actual filtering. Packets
> seem to pass through pf (evaluations counter is increased) but pf_test_tcp
> seems to always return PF_PASS. I have added a panic("debug") where I think
> the investigation should start. Aggelos has helped me a lot on this also
> but since I will be away for 2 weeks I would like to make my current status
> public. So anyone willing to look into it could do so. I might find the
> time to work a little bit on it until friday. I will keep you informed if I
> change anything on the tree before I leave.
> http://gitweb.dragonflybsd.org/~lentferj/dragonfly.git/shortlog/refs/heads/pf_update
> Jan
> --
> professional: http://www.oscar-consult.de
> private: http://neslonek.homeunix.org/drupal/

Nice work but is there a reason why you choose such an old PF version
(OpenBSD 4.1 was release in may 2007)?


More information about the Kernel mailing list