Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Apr 2013 18:25:54 +0100
From:      Chris Rees <utisoft@gmail.com>
To:        David DEMELIER <demelier.david@gmail.com>
Cc:        Warren Block <wblock@wonkity.com>, Scott Long <scott4long@yahoo.com>, "current@freebsd.org" <current@freebsd.org>, Chris Rees <crees@freebsd.org>, Rui Paulo <rpaulo@felyko.com>, "net@freebsd.org" <net@freebsd.org>
Subject:   Re: ipfilter(4) needs maintainer
Message-ID:  <CADLo838_maVVpE5-iWtks8RHzEK2%2BVyaTnHQyvwfHrteCNYKXg@mail.gmail.com>
In-Reply-To: <CAO%2BPfDcwtiUwmxcdLrxu-XCVso-hWNViJN%2BJ78TWL8My3epFGA@mail.gmail.com>
References:  <20130411201805.GD76816@FreeBSD.org> <7D8ACD5C-821D-4505-82E4-02267A7BA4F8@FreeBSD.org> <E2F803DD-1F3A-430E-957F-7AB1904CDF42@samsco.org> <96D56EAE-E797-429E-AEC9-42B19B048CCC@FreeBSD.org> <6DEDD3EA-45C1-4549-AA13-5E4F6674BE3E@samsco.org> <2D0B66DB-E232-4F34-9D01-57DF226B9BAA@FreeBSD.org> <2DA4A561-3304-432D-B5D1-7053A27E758F@yahoo.com> <F45FFB8A-4B54-4AEF-AA19-D96DAD0C399D@felyko.com> <CADLo839TyKF2dnONpQ6fyUAVOHG1dYYXih5wS3jANVZBiR=VTA@mail.gmail.com> <alpine.BSF.2.00.1304140946440.10505@wonkity.com> <20130414160648.GD96431@in-addr.com> <CAO%2BPfDcwtiUwmxcdLrxu-XCVso-hWNViJN%2BJ78TWL8My3epFGA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 19 Apr 2013 10:46, "David Demelier" <demelier.david@gmail.com> wrote:
>
> 2013/4/14 Gary Palmer <gpalmer@freebsd.org>:
> > On Sun, Apr 14, 2013 at 09:48:33AM -0600, Warren Block wrote:
> >> Is it possible to move ipfilter into a port?
> >
> > That may work short term, but the ENOMAINTAINER problem will quickly
creep
> > up again as kernel APIs change.  If the author has lost interest in
> > maintaining the FreeBSD port of ipfilter then unless someone steps
forward
> > to carry on the work, I don't see much of a future for ipfilter in
> > FreeBSD
> >
> > Do we honestly need three packet filters?
> >
>
> No, for me only one should be present. I completely understand that
> some users still use IPFilter and IPFW but why providing three packet
> filters?
>
> The answer should be: use one and document only one. If at the
> beginning we started documenting only one all users should have used
> the only one present. Now we really need to remove the ancestral
> ipfilter and tell people switching to pf(4).
>
> Everything in life change, if we need to maintain all code from the
> past we will have a lot of compat code that pollute the full source
> tree and we will never improve the code just because of old bits

These so called "old bits" are both maintained, and have different
strengths.

Removing dead unmaintained code yes, but having choice makes transition
easier from other OSes; the fewer parts to change at a time, the better.

Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CADLo838_maVVpE5-iWtks8RHzEK2%2BVyaTnHQyvwfHrteCNYKXg>