Re: Removing PF

2019-04-02 Thread R0me0 ***
For God sake, OpenBSD still there Be Puffy! Em ter, 2 de abr de 2019 às 03:51, Constantine A. Murenin escreveu: > On 2019-W14-1 19:12 -0700, Jordan Geoghegan wrote: > > Realistically, we need to move to the one true firewall-- iptables! > > Ideally, OpenBSD needs a firewall thats 'web scale'

Re: Removing PF

2019-04-02 Thread obsd
Op 2-4-2019 om 04:12 schreef Jordan Geoghegan: On 4/1/19 9:03 AM, Kevin Chadwick wrote: On 4/1/19 3:18 PM, Mateusz Guzik wrote: While I support pf removal, I don't think bpf is the way to go. FreeBSD just removed their pf [1] so the code is up for grabs and you can import it with one weird

Re: Removing PF

2019-04-02 Thread Constantine A. Murenin
On 2019-W14-1 19:12 -0700, Jordan Geoghegan wrote: > Realistically, we need to move to the one true firewall-- iptables! > Ideally, OpenBSD needs a firewall thats 'web scale' that can be > administered from a PHP web based frontend that uses JSON message > passing for clustering and failover.

Re: Removing PF

2019-04-01 Thread Jordan Geoghegan
On 4/1/19 9:03 AM, Kevin Chadwick wrote: On 4/1/19 3:18 PM, Mateusz Guzik wrote: While I support pf removal, I don't think bpf is the way to go. FreeBSD just removed their pf [1] so the code is up for grabs and you can import it with one weird trick. [1]

Re: Removing PF

2019-04-01 Thread Shawn Webb
On Mon, Apr 01, 2019 at 05:31:54AM -0600, Theo de Raadt wrote: > Todd C. Miller wrote: > > > On Mon, 01 Apr 2019 07:01:03 +0200, Claudio Jeker wrote: > > > > > There have been internal discussions about OpenBSD also removing the pf > > > packet filter after the upcoming 6.5 release. Instead a

Re: [EXTERNAL] Re: Removing PF

2019-04-01 Thread Eichert, Diana
needs toggle switches anyway? -Original Message- From: Alexander Nasonov Sent: Monday, April 1, 2019 1:38 PM To: Eichert, Diana Cc: tech@openbsd.org Subject: Re: [EXTERNAL] Re: Removing PF Eichert, Diana wrote: > I wrote a vax BPF jit as a simple exercize some time ago, so all

Re: [EXTERNAL] Re: Removing PF

2019-04-01 Thread Alexander Nasonov
Eichert, Diana wrote: > I wrote a vax BPF jit as a simple exercize some time ago, so all > you really need now is to implement vax-to-${ARCH} jit on an MD > basis. This should be very easy to do as long as BPF does not get > extended to use floating-point values. I'm afraid you have to rewrite it

Re: Removing PF

2019-04-01 Thread obsd
Op 1-4-2019 om 18:03 schreef Kevin Chadwick: On 4/1/19 3:18 PM, Mateusz Guzik wrote: While I support pf removal, I don't think bpf is the way to go. FreeBSD just removed their pf [1] so the code is up for grabs and you can import it with one weird trick. [1]

Re: [EXTERNAL] Re: Removing PF

2019-04-01 Thread Eichert, Diana
I thought you were going to deal with MD issues by adding support for SIMH into 6.6? -Original Message- From: owner-t...@openbsd.org On Behalf Of Miod Vallat Sent: Monday, April 1, 2019 7:04 AM To: tech@openbsd.org Subject: [EXTERNAL] Re: Removing PF > Will the bpf JIT changes be d

Re: Removing PF

2019-04-01 Thread Kevin Chadwick
On 4/1/19 3:18 PM, Mateusz Guzik wrote: > While I support pf removal, I don't think bpf is the way to go. > > FreeBSD just removed their pf [1] so the code is up for grabs and you > can import it with one weird trick. > > [1] >

Re: Removing PF

2019-04-01 Thread Devin Ceartas
Will authpf be around?

Re: Removing PF

2019-04-01 Thread Mateusz Guzik
On 4/1/19, Claudio Jeker wrote: > There have been internal discussions about OpenBSD also removing the pf > packet filter after the upcoming 6.5 release. Instead a switch to > using David Gwynne's new bpf filter will happen. > The benefits outweigh the drawbacks and the missing features will be >

Re: Removing PF

2019-04-01 Thread Alexandr Nedvedicky
On Mon, Apr 01, 2019 at 01:04:19PM -, Miod Vallat wrote: > > > Will the bpf JIT changes be done in time for 6.6? I have no doubt > > that "pfctl -p /dev/bfp" can be made to work in time but for a truly > > performant firewall we will need bpf JIT. > > I wrote a vax BPF jit as a simple

Re: Removing PF

2019-04-01 Thread Miod Vallat
> Will the bpf JIT changes be done in time for 6.6? I have no doubt > that "pfctl -p /dev/bfp" can be made to work in time but for a truly > performant firewall we will need bpf JIT. I wrote a vax BPF jit as a simple exercize some time ago, so all you really need now is to implement

Re: Removing PF

2019-04-01 Thread Stuart Henderson
On 2019/04/01 07:01, Claudio Jeker wrote: > There have been internal discussions about OpenBSD also removing the pf > packet filter after the upcoming 6.5 release. Instead a switch to > using David Gwynne's new bpf filter will happen. > The benefits outweigh the drawbacks and the missing features

Re: Removing PF

2019-04-01 Thread Ingo Schwarze
Hi Claudio, Claudio Jeker wrote on Mon, Apr 01, 2019 at 07:01:03AM +0200: > There have been internal discussions about OpenBSD also removing the pf > packet filter after the upcoming 6.5 release. Instead a switch to > using David Gwynne's new bpf filter will happen. > The benefits outweigh the

Re: Removing PF

2019-04-01 Thread Theo de Raadt
Todd C. Miller wrote: > On Mon, 01 Apr 2019 07:01:03 +0200, Claudio Jeker wrote: > > > There have been internal discussions about OpenBSD also removing the pf > > packet filter after the upcoming 6.5 release. Instead a switch to > > using David Gwynne's new bpf filter will happen. > > The

Re: Removing PF

2019-04-01 Thread Todd C . Miller
On Mon, 01 Apr 2019 07:01:03 +0200, Claudio Jeker wrote: > There have been internal discussions about OpenBSD also removing the pf > packet filter after the upcoming 6.5 release. Instead a switch to > using David Gwynne's new bpf filter will happen. > The benefits outweigh the drawbacks and the

Re: Removing PF

2019-04-01 Thread Tom Smyth
Yeah... i would love you all to give affect to that... +1 from me claudioabout time!... Thanks for articulating what i have been thinking all this time... 1/4/2019 will be a historic turning point for us On Monday, 1 April 2019, Claudio Jeker wrote: > There have been internal

Re: Removing PF

2019-04-01 Thread Janne Johansson
Den mån 1 apr. 2019 kl 07:30 skrev Ian McWilliam < i.mcwill...@westernsydney.edu.au>: > "peeing on, or even integration into baby mulching > machines or atomic bombs to be dropped on Australia" > That's a lot of missing features to implement in one release cycle. > > I would like the license

Re: Removing PF

2019-03-31 Thread Ian McWilliam
nt: Monday, 1 April 2019 4:01 PM To: tech@openbsd.org Subject: Removing PF There have been internal discussions about OpenBSD also removing the pf packet filter after the upcoming 6.5 release. Instead a switch to using David Gwynne's new bpf filter will happen. The benefits outweigh the

Removing PF

2019-03-31 Thread Claudio Jeker
There have been internal discussions about OpenBSD also removing the pf packet filter after the upcoming 6.5 release. Instead a switch to using David Gwynne's new bpf filter will happen. The benefits outweigh the drawbacks and the missing features will be readily implemented in time for the 6.6