On Thu, Jun 10, 2010 at 11:55 AM, Jan Lentfer <jan.lent...@web.de> wrote: > I have made some progress on the PF work. pf.ko can be loaded and unloaded > (now even w/o panic, thanks to Aggelos) and I have updated pfctl to the > version that comes with OpenBSD 4.1. So you can enable PF, load rules and > view then and so on. All that works. > What doesn't work at all at the moment is the actual filtering. Packets > seem to pass through pf (evaluations counter is increased) but pf_test_tcp > seems to always return PF_PASS. I have added a panic("debug") where I think > the investigation should start. Aggelos has helped me a lot on this also > but since I will be away for 2 weeks I would like to make my current status > public. So anyone willing to look into it could do so. I might find the > time to work a little bit on it until friday. I will keep you informed if I > change anything on the tree before I leave. > > http://gitweb.dragonflybsd.org/~lentferj/dragonfly.git/shortlog/refs/heads/pf_update > > Jan > > -- > professional: http://www.oscar-consult.de > private: http://neslonek.homeunix.org/drupal/ >
Nice work but is there a reason why you choose such an old PF version (OpenBSD 4.1 was release in may 2007)? BR Dunceor