Re: Proposed Improvements to NPF

Emmanuel Nyarko <[email protected]> Sat, 7 Jun 2025 21:31:12 +0000
Newsgroups gmane.os.netbsd.devel.network
Message-ID <[email protected]>

> On 7 Jun 2025, at 9:21 PM, Josh Moyer <[email protected]> wrote:
> 
> Emmanuel wrote:
>> I’m the current maintainer now. happy to have you.
>> if you want pointers to the codebase, feel free to reach out.
>> can be of help.
> 
> Thanks Emmanuel!  I've already been looking at [1] and have
> kind of a vague idea as to how to proceed.  Will let you
> know of specific questions, if any.
> 
> Also, 'prolly worth apologizing for swooping in here...  For the
> record, I do NOT have ambitions to become NPF maintainer.  I just
> (badly) need the multiple interface per group and nested variable
> features to simplify my somewhat broken 720 line npf.conf.
> 
> If you want to do the implementation that would be GREAT, frankly.
> However, I am hoping to fix my long standing problems with my
> configuration sooner rather than later, hence my proposal.  Let
> me know how I should proceed.

Currently, I’m working on other things. i think you can go ahead with the multiple interface per group work.

and maybe you could send a simple rule that uses nested variables and crashes. I submitted some null-checks patch in the config recently, and maybe could also trace it there too.
> 
> [1] /usr/src/usr.sbin/npf/(npfctl/)
> 
> --
> Thanks and kind regards,
>    _____    
>   | * * |   Josh Moyer (he/him) <[email protected]>
>   |*(*)*|   http://jmoyer.nodomain.net/
>    \ - /    http://www.nodomain.net/
>     \//     
>             Love, Responsibility, Justice
>             Liebe, Verantwortung, Gerechtigkeit
> 
>             Please don't eat the animals.
>             Thanks.

Emmanuel