Request to introduce a public revision number to PF and pfctl.

Looking at CVSWeb I collected a quick stat about how many things change for 
the single file /usr/src/sys/net/pf.c

http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c?only_with_tag=OPENBSD_3_3

3.0     6 commits               1 year
3.1     2 commits               1 year
3.2     1 commit                1 year
3.3     5 commits               6 months


If you try to sum all the changes to pf* files and pfctl it becomes easy to 
understand that PF can behave in _different_ ways even if you are using the 
same OpenBSD release. It depends on the date of the last sync with -stable 
branch.

Given the fact that not everyone follows -stable branch, I'll suggest to 
introduce a public revision number for PF, available via sysctl or other 
ways. The same request is for pfctl, that could be easily deployed with a -V 
arg.

By the way, this method should be used with every tool written and available 
only on OpenBSD like authpf, pflogd and so on. In fact isn't true that every 
imported software or available as ports has its own version number ?


        Ed


# RFC @ hacking.openbsd.it


Reply via email to