Future of pf / firewall in FreeBSD ? - does it have one ?

[Lyndon Nerenberg]

On Jul 20, 2014, at 11:35 AM, Daniel Feenberg <feenberg at nber.org> wrote:

> Rather they have said "An updated pf would not be
> suitable, as it would be incompatible with existing configuration files".

A major FreeBSD version increment is allowed to break that level of backwards compatibility.  Nothing prevents this from being incorporated into 11.x.

The only real concern would be removing existing core functionality as part of the update.  For that you want to provide at least one major release cycle for people up migrate.  Comparing pf on my current OpenBSD machines vs. the FreeBSD 10.x pf, that doesn't seem to be an issue.

--lyndon

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20140720/8e903e67/attachment.sig>