Re: ipf / pf availability in 4.9

From: Will Prater (lists-wp_at_mercurycloud.net)
Date: 12/31/03

  • Next message: Chris: "Re: tar question..."
    Date: Wed, 31 Dec 2003 11:27:16 -0800
    To: fbsd_user@a1poweruser.com
    
    

    On Dec 31, 2003, at 5:12 AM, fbsd_user wrote:

    > The post you are replying to tells you pf has been ported to FBSD.

    Yes, and my question was how to get a port to 4.9. I am aware of the
    port being available for 5.0, 5.1.

    I would like to know if anyone has gotten it to run on 4.9 and what
    patches were necessary.

    Thanks

    > All you had to do is go look for it in the port collection your
    > self,
    > here is the direct link.
    >
    > http://www.freebsd.org/cgi/ports.cgi?query=pf&stype=all&release=5.1-
    > CURRENT%2Fi386
    >
    >
    > pf_freebsd-2.00_1
    > OpenBSD pf as a kldmodule
    > Maintained by: max@love2party.net
    > Also listed in: ipv6
    > Description : Sources : Package : Changes : Download
    >
    >
    > http://pf4freebsd.love2party.net/index.html
    >
    >
    > -----Original Message-----
    > From: owner-freebsd-questions@freebsd.org
    > [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Will Prater
    > Sent: Wednesday, December 31, 2003 2:59 AM
    > To: questions@freebsd.org
    > Subject: Re: ipf / pf availability in 4.9
    >
    > List,
    >
    > Anyone know if there is a way to get PF to port to FreeBSD 4.9?
    >
    > Thanks
    >
    >
    > On Dec 30, 2003, at 7:26 PM, fbsd_user wrote:
    >
    >> PF has been just ported to FBSD. I don't know if ipf & pf have a
    >> common code background, but I do know pf & ipf have totally
    >> different rule processing logic though the rules do look some what
    >> common. When it comes to using variables on the rule set, that is
    >> just the normal function of shell processing. Ipfw, ipf, and pf
    > can
    >> all be buried inside of an shell script and perform variable
    >> substitution.
    >> In FBSD the rc.conf statement for pointing to the directory
    > location
    >> of the ipf rules can not process a script. You just point that
    >> rc.conf statement to an empty file just to get the system up. Then
    >> you have script in the startup application directory that executes
    >> to load the ipf rules. Works great.
    >>
    >> -----Original Message-----
    >> From: owner-freebsd-questions@freebsd.org
    >> [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of
    >> j.l@telus.net
    >> Sent: Tuesday, December 30, 2003 7:35 PM
    >> To: questions@FreeBSD.org
    >> Subject: ipf / pf
    >>
    >> Hi,
    >>
    >> Here's a question that might seem trivial:
    >>
    >> What's the relationship between the freebsd ipf and the openbsd
    > pf?
    >> Are they
    >> the same thing, or are they separately developed branches of a
    >> common
    >> codebase? Or maybe they are totally different. I ask this
    > because
    >> I was
    >> looking around for guides for ipf.rules, and some of the openbsd
    > pf
    >> examples
    >> look similar, but some command syntax are different. The openbsd
    >> pf.conf
    >> example had the ability to define variables of ip addresses,
    >> interface names,
    >> etc, but it doesn't seem to work with ipf.rules. Is there any way
    >> to define
    >> variables in ipf.rules?
    >>
    >> please cc me in your responses cause I'm not subscribed to the
    > list
    >>
    >> thanks so much
    >> jonathan
    >>
    >>
    >>
    >> _______________________________________________
    >> freebsd-questions@freebsd.org mailing list
    >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    >> To unsubscribe, send any mail to
    >> "freebsd-questions-unsubscribe@freebsd.org"
    >>
    >> _______________________________________________
    >> freebsd-questions@freebsd.org mailing list
    >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    >> To unsubscribe, send any mail to
    >> "freebsd-questions-unsubscribe@freebsd.org"
    >>
    >>
    > --will
    >
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"
    >
    > _______________________________________________
    > freebsd-questions@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    > To unsubscribe, send any mail to
    > "freebsd-questions-unsubscribe@freebsd.org"
    >
    >
    --will

    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"


  • Next message: Chris: "Re: tar question..."

    Relevant Pages

    • RE: ipf / pf availability in 4.9
      ... OpenBSD pf as a kldmodule ... ipf / pf availability in 4.9 ... Anyone know if there is a way to get PF to port to FreeBSD 4.9? ... > To unsubscribe, send any mail to ...
      (freebsd-questions)
    • RE: video guru needed - installing driver for ATI 3D Rage IIC AGP
      ... I use it on OpenBSD and didn't imagine that it wouldn't exist on ... look at the OpenBSD port ... ... To unsubscribe, ...
      (freebsd-questions)
    • A possibly simple query about pf on FreeBSD 5.3-RELEASE
      ... After nearly a week of fighting the dual problem of OpenBSD 3.6 release ... on port ssh and did a few tests with different IP addresses ... I am trying to install plone, zope (and a bunch of zope/plone related ... packages) and apache on the machine. ...
      (freebsd-questions)
    • A possibly simple query about pf on FreeBSD 5.3-RELEASE
      ... After nearly a week of fighting the dual problem of OpenBSD 3.6 release ... on port ssh and did a few tests with different IP addresses ... I am trying to install plone, zope (and a bunch of zope/plone related ... packages) and apache on the machine. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: Is VLAN still secure ?
      ... >> Erik Jan van Westen wrote: ... >> port that the system is plugged into is a trunk port, ... >> an openbsd system assume identity in a different VLAN? ...
      (comp.security.firewalls)