Date: Thu, 16 Sep 2004 04:01:17 -0000 From: pf-r@solarflux.org To: pf4freebsd@freelists.org Subject: [pf4freebsd] Re: [OT] FreeBSD/PF for Darwin/OSX? Message-ID: <1076688281.402cf5996a0dc@66.150.201.72>
next in thread | raw e-mail | index | archive | help
I guess Chris didn't 'reply-all'; thanks, though for the detailed info!
----- Forwarded message from "Christopher D. Lewis" <Lewis@Alumni.Duke.ed=
u>
-----
Date: Fri, 13 Feb 2004 08:12:22 -0600
From: "Christopher D. Lewis" <Lewis@Alumni.Duke.edu>
Reply-To: "Christopher D. Lewis" <Lewis@Alumni.Duke.edu>
Subject: Re: [pf4freebsd] Re: [OT] FreeBSD/PF for Darwin/OSX?
To: "pf-r@solarflux.org" <pf-r@solarflux.org>
On Feb 13, 2004, at 6:50 AM, pf-r@solarflux.org wrote:
> OS X is based on the mach (micro)kernel, I believe. I'm all for=20
> having pf
> ported over to OS X!
MacOS X is the combination of the Darwin operating system=20
<http://www.opendarwin.org>; and Apple's proprietary additions=20
(principally APIs and user interface). The Darwin kernel places in one=20
address space a hybrid mach microkernel and FreeBSD-derived kernel,=20
with mach handling IPC and scheduling and BSD handling the *nix system=20
calls expected to be supported by a *nix operating system. Apple has=20
not prioritized firewalling, and until recently hasn't shipped hardware=20
which would make serious firewallers especially interested. The=20
Darwin/MacOS X firewall, the ipfw obtained from the last FreeBSD synch,=20
is contained in a loadable kernel module called a .kext (kernel=20
extension). (the kernel extension is located at=20
/System/Library/Extensions/IPFirewall.kext and the source should be at=20
opendarwin.org)
> BTW, I've updated the pf-r with some new content; mainly the latest=20
> version of
> pf-freebsd, a 'fresh' section at the top for news, some new tools=20
> (including
> Hatchet)... I'm going to go over the examples again soon and try to=20
> better
> categorize them (grouping by features, if possible).
Efforts to get pf working on MacOS X would be greatly appreciated by=20
some users, and making sure it fits into a separate .kext would allow=20
selection of which firewall tool to load at boot time.
Best regards,
Chris
----- End forwarded message -----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1076688281.402cf5996a0dc>