cvs commit: src/sys/contrib/pf/net if_pflog.c if_pflog.h if_pfsync.c if_pfsync.h pf.c pf_ioctl.c pf_norm.c pf_osfp.c pf_table.c pfvar.h src/sys/contrib/pf/netinet in4_cksum.c

[Steve Kargl]

On Wed, Feb 25, 2004 at 06:34:13PM -0800, Max Laier wrote:
> mlaier      2004/02/25 18:34:12 PST
> 
>   FreeBSD src repository
> 
>   Modified files:
>     sys/contrib/pf/net   if_pflog.c if_pflog.h if_pfsync.c 
>                          if_pfsync.h pf.c pf_ioctl.c pf_norm.c 
>                          pf_osfp.c pf_table.c pfvar.h 
>     sys/contrib/pf/netinet in4_cksum.c 
>   Log:
>   Bring diff from the security/pf port. This has code been tested as a port
>   for a long time and is run in production use. This is the code present in
>   portversion 2.03 with some additional tweaks.
>   
>   The rather extensive diff accounts for:
>    - locking (to enable pf to work with a giant-free netstack)
>    - byte order difference between OpenBSD and FreeBSD for ip_len/ip_off
>    - conversion from pool(9) to zone(9)
>    - api differences etc.
>   
>   Approved by: bms(mentor) (in general)
>   

Was this import discussed on arch@ or current@?  We now have ipfw, ipfilter,
and pf in the base system.  How many more firewall packages are we going
to import into the base system?  Are you going to remove ipfw or ipfilter?
Is there a NO_PF make.conf knob?

-- 
Steve