Re: version of OpenBSD and PF
Mohsen Pahlevanzadeh <[email protected]> Mon, 23 Mar 2015 21:38:44 +0430
| Newsgroups | gmane.os.openbsd.pf |
|---|---|
| Message-ID | <[email protected]> |
On 03/23/2015 09:58 PM, Peter N. M. Hansteen wrote: > Mohsen Pahlevanzadeh <[email protected]> writes: > >> As you know, version of PF related of openbsd's release, And since of >> of a specific version of OpenBSD, PF syntax has been rewritten. i have >> two question : >> 1. What's the given openbsd version? > Depending on how you count, there were either two or three flag day > changes (or actually more when I think back, but perhaps not > immediately obious syntax-wise) > > 1) 'keep state' becoming the default in OpenBSD 4.1 -- but everybody's > forgotten about that one, mainly because FreeBSD and NetBSD back then > adopted the change relatively quickly > > 2) the NAT rewrite and syntax change (nat-to, rdr-to etc) in 4.7 -- > old rule sets will break, in almost all cases easily fixable, and > the new syntax is lots more flexible anyway (and the reason The > Book of PF needed a second edition) > > 3) the introduction of new queueing system in 5.5 - again an > opportunity to make the rulse more readable and offering more > flexibility, at the cost of at least some (mostly quite easy) > conversion. (and the reason there is a third edition of that book) > > There have been several other significant changes over the years, > including a fairly complete rewrite of the logging code and various > bits and pieces. > > My tutorial slides has a partial list of significant developments > starting at http://home.nuug.no/~peter/pf/newest/design-evolution.html > but it's not exhaustive. > >> 2. hwo can i retrive the given openbsd and pf version? >> >> Why i asked same question? i'm writing article about PF and i explain >> version and synyax error. > OpenBSD officially supports the two most recent releases, and > essentially all development work happens on -current, with the bits > that get done in time to be included in the next release. At this > moment the oldest supported release is 5.5, which is the last to > include both the old ALTQ code and the new queueing system. Running > older, unsupported versions is not recommended. Unfortunately ,I couldn't explain my purpose, Of course, OpenBSD.org show it, I use FreeBSD , I need to find out my pf is related to which release of openbsd...via some grep in /usr/src or etc .... > If you're writing an article on PF, consider keeping things simple for > yourself and focus on OpenBSD exclusively. Otherwise you'll end up > compensating for and explaining the fact that the others (NetBSD, > FreeBSD, Apple) have let their PF code fossilize at various oddly > chosen points in time that don't make much sense at all for newcomers. >