Packet Filter (from here on referred to as PF) is OpenBSD's system for
filtering TCP/IP traffic and doing Network Address Translation. PF is also
capable of normalizing and conditioning TCP/IP traffic and providing bandwidth
control and packet prioritization.
Version 2.00 of this port has the same function set as found in OpenBSD 3.4
Information about pf can be found at the website of Daniel Hartmeier, the
original author of PF: http://www.benzedrine.cx/pf.html and OpenBSD PF FAQ:
http://www.openbsd.org/faq/pf/
WWW: http://pf4freebsd.love2party.net/
-Max <reports@pf4freebsd.love2party.net>
- Update to 2.02
* Fix severe byte order related problem with "route-to" rules
(much help from Joris Vandalon with testing here)
* Make tcpdump's -w flag work for if_pfsync
* Fix byte order and drop lock for icmp_error() calls.
(note that it is necessary to allow icmp_error messages - from
"block-policy return" - as FreeBSD does not know about pf's
special tags, yet).
- update ALTQ-message to point to the new 5.2R-patchset from rofug.ro
as well
PR: ports/61318
Submitted by: Max Laier <max@love2party.net> (maintainer)
Supersedes ports/59442 and previous hasty-fix, and fixes the following:
- Build with __FreeBSD_version > 501114 (see bms commit)
- Build with new route.h (no RTF_PRCLONING)
- Don't use hardware assistance on framentation when DF is set.
- Allow pftcpdump -w to be used with pfsync.
Found-by: bento / Pyun YongHyeon
Submitted by: Max Laier
PR: ports/59548
Bump port version to 2.00:
- Build again with FreeBSD_version > 501113 (if_xname)
- Fix some byte order problems with route-to rules
- Stable release
PR: 589037
Submitted By: MAINTAINER
Update port: security/pf - OpenBSD 3.4 pf
Port update after API change in PFIL_HOOKS in -current and
OpenBSD 3.4 Release.
PR: ports/57305
Submitted by: Max Laier <max@love2party.net>
Add a patch to fix a u_int_16 overflow after new merged gcc.
Submitted by: Pyun YongHyeon <yongari@kt-is.co.kr>
Reviewed by: maintainer
tested ok by: all current platforms
Add a critical patch to fix a problem with normalization, which does not
cause problems in normal operation but might lead to a pagefault => crash.
Submitted by: Pyun YongHyeon <yongari@kt-is.co.kr>
Approved by: maintainer
Use a better comment in system passwd file when we create the user 'proxy'
at first time. No necessary to bump PRTREVISION so only force commit in
Makefile.
Approved by: maintainer
Reformat pkg-install & pkg-message, and add 64-bit platform fix.
Note: pf now register its user as proxy:proxy which uid/gid is 62:62.
Submitted by: maintainer
Add two patches to solve the following problems:
patch-ab
- resolves a problem with a mbuf-tag in 5.1
- Submitted by: Pyun YongHyeon <yongari@kt-is.co.kr>
patch-ac
- pulls in two critical fixes from OpenBSD patch branch
- Obtained from: OpenBSD
Change BROKEN to IGNORE tag in Makefile, suggested by: kris@
&& bump PORTREVISION.
Submitted by: Kjell <la3sg@frisurf.no>
Reviewed by: maintainer
Correct wording in pkg-message to avoid a possible copy & paste
problem, and bump PORTREVISION.
