Re: Why so many packet filters?

2016-08-15 Thread Joerg Sonnenberger
On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote:
> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't
> well maintained nowadays?

While they are not maintained, PF works quite well for the feature set
our version has. There are still quite a few issues with NPF, primarily
documentation issues, but also some functional ones. It seems a bit
premature to deprecate IPF and PF in the current situation. That said,
they should certainly be considered legacy functionality.

Joerg


Re: Why so many packet filters?

2016-08-15 Thread Malcolm Herbert
On Mon, Aug 15, 2016 at 09:13:46AM +0200, Joerg Sonnenberger wrote:
|On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote:
|> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't
|> well maintained nowadays?
|
|While they are not maintained, PF works quite well for the feature set
|our version has. There are still quite a few issues with NPF, primarily
|documentation issues, but also some functional ones. It seems a bit
|premature to deprecate IPF and PF in the current situation. That said,
|they should certainly be considered legacy functionality.

+1 for keeping pf in at least - I tend to prefer the functionality of
the tools around pf rather than ipf ... I haven't yet tried npf, so that
may sway me away from pf

Regards,
Malcolm

-- 
Malcolm Herbert
m...@mjch.net


NPF table bug (Was: Why so many packet filters?)

2016-08-15 Thread Geoff Wing
On Monday 2016-08-15 17:14 +1000, Joerg Sonnenberger output:
:[] There are still quite a few issues with NPF, primarily
:documentation issues, but also some functional ones. It seems a bit
[...]

I recently ran into an NPF bug (PR 50511 from December last year).
A cursory scan suggested it was running into an arbitrary limit
in proplib and not handling it gracefully.  I haven't had time
to look into it more deeply.

Regards,
Geoff


Re: Why so many packet filters?

2016-08-15 Thread Ryota Ozaki
On Mon, Aug 15, 2016 at 4:13 PM, Joerg Sonnenberger  wrote:
> On Mon, Aug 15, 2016 at 01:51:38PM +0900, Ryota Ozaki wrote:
>> BTW should we mark pf and ipf deprecated in netbsd-8 as they aren't
>> well maintained nowadays?
>
> While they are not maintained, PF works quite well for the feature set
> our version has. There are still quite a few issues with NPF, primarily
> documentation issues, but also some functional ones. It seems a bit
> premature to deprecate IPF and PF in the current situation. That said,
> they should certainly be considered legacy functionality.

Hmm, I thought npf is mature. I think it's better to have TODOs of npf
somewhere to clarify what we need to do to make it mature enough.

  ozaki-r


Re: Building on OS X - how?

2016-08-15 Thread Hubert Feyrer
Hi Jaromir,

> Am 13.08.2016 um 22:06 schrieb Jaromír Doleček :
> FWIW, build of tools for both i386 and sparc64 finished without
> problems for me on Mac OS X host (10.11.6), building from clean
> sources.

Do you have the Mac OS X Command Line Tools installed?
It’s not part of XCode but needs extra installation.

 - Hubert


daily CVS update output

2016-08-15 Thread NetBSD source update

Updating src tree:
P src/distrib/sets/Makefile
P src/distrib/sets/mkvars.mk
P src/distrib/sets/sets.subr
P src/distrib/sets/lists/xbase/shl.mi
P src/distrib/sets/lists/xcomp/mi
P src/distrib/sets/lists/xcomp/shl.mi
P src/distrib/sets/lists/xdebug/mi
P src/distrib/sets/lists/xdebug/shl.mi
P src/distrib/sets/lists/xserver/md.amd64
P src/distrib/sets/lists/xserver/md.i386
P src/doc/3RDPARTY
P src/doc/CHANGES
P src/external/bsd/dhcpcd/dist/defs.h
P src/external/bsd/dhcpcd/dist/dhcp.c
P src/external/bsd/dhcpcd/dist/dhcp6.c
P src/external/bsd/dhcpcd/dist/dhcpcd.8.in
P src/external/bsd/dhcpcd/dist/eloop.c
P src/external/bsd/dhcpcd/dist/if-bsd.c
P src/external/bsd/dhcpcd/dist/ipv4.c
P src/external/bsd/dhcpcd/dist/ipv6.c
P src/external/bsd/dhcpcd/dist/ipv6nd.c
P src/external/mit/xorg/lib/Makefile
P src/external/mit/xorg/server/drivers/xf86-video-nouveau/Makefile
P src/external/mit/xorg/server/xorg-server/Makefile.serverlib
P src/external/mit/xorg/server/xorg-server/Xi/Makefile
P src/external/mit/xorg/server/xorg-server/include/Makefile
P src/external/mit/xorg/server/xorg-server/randr/Makefile
P src/sbin/devpubd/hooks/02-wedgenames
P src/sbin/fsck_ext2fs/fsck.h
P src/sbin/fsck_ext2fs/setup.c
P src/share/man/man7/hier.7
P src/share/mk/bsd.own.mk
P src/share/mk/bsd.x11.mk
P src/sys/arch/arm/omap/omap3_sdhc.c
P src/sys/arch/evbsh3/stand/mesboot/src/mesboot.c
P src/sys/arch/ia64/stand/common/load_elf64.c
P src/sys/arch/ia64/stand/efi/libefi/devicename.c
P src/sys/arch/ia64/stand/ia64/ski/devicename.c
P src/sys/arch/mips/mips/mipsX_subr.S
P src/sys/arch/sparc/sparc/emul.c
P src/sys/arch/sparc/stand/ofwboot/loadfile_machdep.c
P src/sys/compat/linux/common/linux_futex.c
P src/sys/dev/clock_subr.c
P src/sys/dev/bluetooth/bcsp.c
P src/sys/dev/if_ndis/if_ndis.c
P src/sys/dev/if_ndis/if_ndis_pccard.c
P src/sys/dev/microcode/aic7xxx/aicasm.c
P src/sys/dev/pci/cmpci.c
P src/sys/net/if_ieee1394subr.c
P src/sys/net/if_tap.c
P src/sys/netsmb/smb_rq.c
P src/sys/ufs/ext2fs/ext2fs.h
P src/sys/ufs/ext2fs/ext2fs_bswap.c
P src/sys/ufs/ext2fs/ext2fs_extern.h
P src/sys/ufs/ext2fs/ext2fs_rename.c
P src/sys/ufs/ext2fs/ext2fs_vnops.c
P src/usr.bin/make/make.1
P src/usr.bin/make/meta.c
P src/usr.sbin/moused/moused.8

Updating xsrc tree:
P xsrc/external/mit/xf86-video-ag10e/dist/src/ag10e_driver.c
P xsrc/external/mit/xf86-video-apm/dist/src/apm.h
P xsrc/external/mit/xf86-video-apm/dist/src/apm_driver.c
P xsrc/external/mit/xf86-video-ark/dist/src/ark_driver.c
P xsrc/external/mit/xf86-video-ati/dist/src/radeon_driver.c
P xsrc/external/mit/xf86-video-ati/dist/src/radeon_kms.c
P xsrc/external/mit/xf86-video-chips/dist/src/ct_driver.c
P xsrc/external/mit/xf86-video-crime/dist/src/crime_driver.c
P xsrc/external/mit/xf86-video-glint/dist/src/glint_driver.c
P xsrc/external/mit/xf86-video-i128/dist/src/i128_driver.c
P xsrc/external/mit/xf86-video-igs/dist/src/igs_driver.c
P xsrc/external/mit/xf86-video-imstt/dist/src/imstt_driver.c
P xsrc/external/mit/xf86-video-intel-old/dist/src/i810_driver.c
P xsrc/external/mit/xf86-video-intel-old/dist/src/i830_driver.c
P xsrc/external/mit/xf86-video-intel-old/dist/src/i830_i2c.c
P xsrc/external/mit/xf86-video-intel-old/dist/uxa/uxa-priv.h
P xsrc/external/mit/xf86-video-newport/dist/src/newport_driver.c
P xsrc/external/mit/xf86-video-nsc/dist/src/nsc_driver.c
P xsrc/external/mit/xf86-video-nsc/dist/src/nsc_gx1_driver.c
P xsrc/external/mit/xf86-video-nsc/dist/src/nsc_gx2_driver.c
P xsrc/external/mit/xf86-video-nv/dist/src/g80_driver.c
P xsrc/external/mit/xf86-video-nv/dist/src/nv_driver.c
P xsrc/external/mit/xf86-video-nv/dist/src/nv_include.h
P xsrc/external/mit/xf86-video-nv/dist/src/riva_driver.c
P xsrc/external/mit/xf86-video-nv/dist/src/riva_include.h
P xsrc/external/mit/xf86-video-nvxbox/dist/src/nv_driver.c
P xsrc/external/mit/xf86-video-nvxbox/dist/src/nv_include.h
P xsrc/external/mit/xf86-video-pnozz/dist/src/pnozz_driver.c
P xsrc/external/mit/xf86-video-r128/dist/ChangeLog
P xsrc/external/mit/xf86-video-r128/dist/aclocal.m4
P xsrc/external/mit/xf86-video-r128/dist/configure
P xsrc/external/mit/xf86-video-r128/dist/configure.ac
P xsrc/external/mit/xf86-video-r128/dist/src/r128_output.c
P xsrc/external/mit/xf86-video-rendition/dist/src/rendition.c
P xsrc/external/mit/xf86-video-rendition/dist/src/rendition.h
P xsrc/external/mit/xf86-video-s3/dist/src/s3_driver.c
P xsrc/external/mit/xf86-video-s3virge/dist/src/s3v_driver.c
P xsrc/external/mit/xf86-video-sis/dist/ChangeLog
P xsrc/external/mit/xf86-video-sis/dist/INSTALL
P xsrc/external/mit/xf86-video-sis/dist/Makefile.in
P xsrc/external/mit/xf86-video-sis/dist/aclocal.m4
P xsrc/external/mit/xf86-video-sis/dist/config.guess
P xsrc/external/mit/xf86-video-sis/dist/config.h.in
P xsrc/external/mit/xf86-video-sis/dist/config.sub
P xsrc/external/mit/xf86-video-sis/dist/configure
P xsrc/external/mit/xf86-video-sis/dist/configure.ac
P xsrc/external/mit/xf86-video-sis/dist/depcomp
P xsrc/external/mit/xf86-video-sis/dist/install-sh
P xsrc/external/mit/xf86-video-sis/dis