Re: Why so many packet filters?
On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote: > BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't > well maintained nowadays? While they are not maintained, PF works quite well for the feature set our version has. There are still quite a few issues with NPF, primarily documentation issues, but also some functional ones. It seems a bit premature to deprecate IPF and PF in the current situation. That said, they should certainly be considered legacy functionality. Joerg
Re: Why so many packet filters?
On Mon, Aug 15, 2016 at 09:13:46AM +0200, Joerg Sonnenberger wrote: |On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote: |> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't |> well maintained nowadays? | |While they are not maintained, PF works quite well for the feature set |our version has. There are still quite a few issues with NPF, primarily |documentation issues, but also some functional ones. It seems a bit |premature to deprecate IPF and PF in the current situation. That said, |they should certainly be considered legacy functionality. +1 for keeping pf in at least - I tend to prefer the functionality of the tools around pf rather than ipf ... I haven't yet tried npf, so that may sway me away from pf Regards, Malcolm -- Malcolm Herbert m...@mjch.net
NPF table bug (Was: Why so many packet filters?)
On Monday 2016-08-15 17:14 +1000, Joerg Sonnenberger output: :[] There are still quite a few issues with NPF, primarily :documentation issues, but also some functional ones. It seems a bit [...] I recently ran into an NPF bug (PR 50511 from December last year). A cursory scan suggested it was running into an arbitrary limit in proplib and not handling it gracefully. I haven't had time to look into it more deeply. Regards, Geoff
Re: Why so many packet filters?
On Mon, Aug 15, 2016 at 4:13 PM, Joerg Sonnenberger wrote: > On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote: >> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't >> well maintained nowadays? > > While they are not maintained, PF works quite well for the feature set > our version has. There are still quite a few issues with NPF, primarily > documentation issues, but also some functional ones. It seems a bit > premature to deprecate IPF and PF in the current situation. That said, > they should certainly be considered legacy functionality. Hmm, I thought npf is mature. I think it's better to have TODOs of npf somewhere to clarify what we need to do to make it mature enough. ozaki-r
Re: Building on OS X - how?
Hi Jaromir, > Am 13.08.2016 um 22:06 schrieb Jaromír Doleček : > FWIW, build of tools for both i386 and sparc64 finished without > problems for me on Mac OS X host (10.11.6), building from clean > sources. Do you have the Mac OS X Command Line Tools installed? It’s not part of XCode but needs extra installation. - Hubert
daily CVS update output
Updating src tree: P src/distrib/sets/Makefile P src/distrib/sets/mkvars.mk P src/distrib/sets/sets.subr P src/distrib/sets/lists/xbase/shl.mi P src/distrib/sets/lists/xcomp/mi P src/distrib/sets/lists/xcomp/shl.mi P src/distrib/sets/lists/xdebug/mi P src/distrib/sets/lists/xdebug/shl.mi P src/distrib/sets/lists/xserver/md.amd64 P src/distrib/sets/lists/xserver/md.i386 P src/doc/3RDPARTY P src/doc/CHANGES P src/external/bsd/dhcpcd/dist/defs.h P src/external/bsd/dhcpcd/dist/dhcp.c P src/external/bsd/dhcpcd/dist/dhcp6.c P src/external/bsd/dhcpcd/dist/dhcpcd.8.in P src/external/bsd/dhcpcd/dist/eloop.c P src/external/bsd/dhcpcd/dist/if-bsd.c P src/external/bsd/dhcpcd/dist/ipv4.c P src/external/bsd/dhcpcd/dist/ipv6.c P src/external/bsd/dhcpcd/dist/ipv6nd.c P src/external/mit/xorg/lib/Makefile P src/external/mit/xorg/server/drivers/xf86-video-nouveau/Makefile P src/external/mit/xorg/server/xorg-server/Makefile.serverlib P src/external/mit/xorg/server/xorg-server/Xi/Makefile P src/external/mit/xorg/server/xorg-server/include/Makefile P src/external/mit/xorg/server/xorg-server/randr/Makefile P src/sbin/devpubd/hooks/02-wedgenames P src/sbin/fsck_ext2fs/fsck.h P src/sbin/fsck_ext2fs/setup.c P src/share/man/man7/hier.7 P src/share/mk/bsd.own.mk P src/share/mk/bsd.x11.mk P src/sys/arch/arm/omap/omap3_sdhc.c P src/sys/arch/evbsh3/stand/mesboot/src/mesboot.c P src/sys/arch/ia64/stand/common/load_elf64.c P src/sys/arch/ia64/stand/efi/libefi/devicename.c P src/sys/arch/ia64/stand/ia64/ski/devicename.c P src/sys/arch/mips/mips/mipsX_subr.S P src/sys/arch/sparc/sparc/emul.c P src/sys/arch/sparc/stand/ofwboot/loadfile_machdep.c P src/sys/compat/linux/common/linux_futex.c P src/sys/dev/clock_subr.c P src/sys/dev/bluetooth/bcsp.c P src/sys/dev/if_ndis/if_ndis.c P src/sys/dev/if_ndis/if_ndis_pccard.c P src/sys/dev/microcode/aic7xxx/aicasm.c P src/sys/dev/pci/cmpci.c P src/sys/net/if_ieee1394subr.c P src/sys/net/if_tap.c P src/sys/netsmb/smb_rq.c P src/sys/ufs/ext2fs/ext2fs.h P src/sys/ufs/ext2fs/ext2fs_bswap.c P src/sys/ufs/ext2fs/ext2fs_extern.h P src/sys/ufs/ext2fs/ext2fs_rename.c P src/sys/ufs/ext2fs/ext2fs_vnops.c P src/usr.bin/make/make.1 P src/usr.bin/make/meta.c P src/usr.sbin/moused/moused.8 Updating xsrc tree: P xsrc/external/mit/xf86-video-ag10e/dist/src/ag10e_driver.c P xsrc/external/mit/xf86-video-apm/dist/src/apm.h P xsrc/external/mit/xf86-video-apm/dist/src/apm_driver.c P xsrc/external/mit/xf86-video-ark/dist/src/ark_driver.c P xsrc/external/mit/xf86-video-ati/dist/src/radeon_driver.c P xsrc/external/mit/xf86-video-ati/dist/src/radeon_kms.c P xsrc/external/mit/xf86-video-chips/dist/src/ct_driver.c P xsrc/external/mit/xf86-video-crime/dist/src/crime_driver.c P xsrc/external/mit/xf86-video-glint/dist/src/glint_driver.c P xsrc/external/mit/xf86-video-i128/dist/src/i128_driver.c P xsrc/external/mit/xf86-video-igs/dist/src/igs_driver.c P xsrc/external/mit/xf86-video-imstt/dist/src/imstt_driver.c P xsrc/external/mit/xf86-video-intel-old/dist/src/i810_driver.c P xsrc/external/mit/xf86-video-intel-old/dist/src/i830_driver.c P xsrc/external/mit/xf86-video-intel-old/dist/src/i830_i2c.c P xsrc/external/mit/xf86-video-intel-old/dist/uxa/uxa-priv.h P xsrc/external/mit/xf86-video-newport/dist/src/newport_driver.c P xsrc/external/mit/xf86-video-nsc/dist/src/nsc_driver.c P xsrc/external/mit/xf86-video-nsc/dist/src/nsc_gx1_driver.c P xsrc/external/mit/xf86-video-nsc/dist/src/nsc_gx2_driver.c P xsrc/external/mit/xf86-video-nv/dist/src/g80_driver.c P xsrc/external/mit/xf86-video-nv/dist/src/nv_driver.c P xsrc/external/mit/xf86-video-nv/dist/src/nv_include.h P xsrc/external/mit/xf86-video-nv/dist/src/riva_driver.c P xsrc/external/mit/xf86-video-nv/dist/src/riva_include.h P xsrc/external/mit/xf86-video-nvxbox/dist/src/nv_driver.c P xsrc/external/mit/xf86-video-nvxbox/dist/src/nv_include.h P xsrc/external/mit/xf86-video-pnozz/dist/src/pnozz_driver.c P xsrc/external/mit/xf86-video-r128/dist/ChangeLog P xsrc/external/mit/xf86-video-r128/dist/aclocal.m4 P xsrc/external/mit/xf86-video-r128/dist/configure P xsrc/external/mit/xf86-video-r128/dist/configure.ac P xsrc/external/mit/xf86-video-r128/dist/src/r128_output.c P xsrc/external/mit/xf86-video-rendition/dist/src/rendition.c P xsrc/external/mit/xf86-video-rendition/dist/src/rendition.h P xsrc/external/mit/xf86-video-s3/dist/src/s3_driver.c P xsrc/external/mit/xf86-video-s3virge/dist/src/s3v_driver.c P xsrc/external/mit/xf86-video-sis/dist/ChangeLog P xsrc/external/mit/xf86-video-sis/dist/INSTALL P xsrc/external/mit/xf86-video-sis/dist/Makefile.in P xsrc/external/mit/xf86-video-sis/dist/aclocal.m4 P xsrc/external/mit/xf86-video-sis/dist/config.guess P xsrc/external/mit/xf86-video-sis/dist/config.h.in P xsrc/external/mit/xf86-video-sis/dist/config.sub P xsrc/external/mit/xf86-video-sis/dist/configure P xsrc/external/mit/xf86-video-sis/dist/configure.ac P xsrc/external/mit/xf86-video-sis/dist/depcomp P xsrc/external/mit/xf86-video-sis/dist/install-sh P xsrc/external/mit/xf86-video-sis/dis