"Bjoern A. Zeeb" <bzeeb-li...@lists.zabbadoz.net> writes:
> Also if people are seriously thinking about virtualising pf we need to
> import the openbsd/apple pf fix from a few years ago because otherwise
> people in virtualised stacks with a /dev/pf can do ugly things.  I
> think it’s been this one:
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3830

There are other serious issues with our current pf (checksum corruption)
which I think can only be resolved by importing a newer version.

Dag-Erling Smørgrav - d...@des.no
freebsd-virtualization@freebsd.org mailing list
To unsubscribe, send any mail to 

Reply via email to