Get RID of the multi threading patch in FreeBSDs version of PF

Darren Pilgrim list_freebsd at bluerosetech.com
Sat Dec 6 20:00:49 UTC 2014


On 12/5/2014 6:09 PM, Martin Hanson wrote:
> Has any important bugs been fixed in PF on OpenBSD since the current
> port in FreeBSD that actually makes the current PF in FreeBSD
> "dangerous" to run with?

FreeBSD's pf is broken for IPv6.  Its lack of fragment support means a 
FreeBSD breaks EDNS0 and other large-packet protocols that rely on 
fragment headers.



More information about the freebsd-pf mailing list