At 11:17 AM 8/06/2002 +1000, Darren Reed wrote:

>At this late stage, if IPFilter 3.4.28 is going to get pulled up into
>4.6-RC*, I want to hear from people using 4.6-RC's that they have tried
>3.4.28 in it and it causes them no problems and does indeed fix problems.
>
>Without that confirmation, I am not going to bother the release engineering
>group with more work.

It's getting a bit on, but on one of my internal test / workhorse:-

IP packet filtering initialized, divert disabled, rule-based forwarding 
disabled
, default to accept, logging limited to 100 packets/entry by default
IPsec: Initialized Security Association Processing.
IP Filter: v3.4.28 initialized.  Default = pass all, Logging = enabled

xwin:~$ uname -a
FreeBSD xwin.intraceptives.com.au 4.6-RC FreeBSD 4.6-RC #1: Sat Jun  8 17:38:45
EST 2002     [EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP  i386

This is an SMP machine, with both IPFilter & IPFW (Dummynet) on it.  It's 
got 3 nic's (fxp0, xl0, & xl1), is doing NAT (RDR, MAP, and is using the 
FTP & IPSec proxies), filtering & policy routing all using IPF. (I've also 
got IPSec connections terminated on it, along with a bunch of internal PPTP 
related "virtual" interfaces which are being filtered as well.)

It's only been going for an hour or so, but so far no problems, and I think 
it's got a fairly comprehensive ruleset.

It would be most excellent to have this in the "default" release...  Or at 
least, an easy way to upgrade the base install.

Thanks,

Warren
[EMAIL PROTECTED]


Reply via email to