From owner-freebsd-pf@FreeBSD.ORG  Sat Sep  1 08:44:47 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 2772B16A419
	for <freebsd-pf@freebsd.org>; Sat,  1 Sep 2007 08:44:47 +0000 (UTC)
	(envelope-from Greg.Hennessy@nviz.net)
Received: from smtp1.bethere.co.uk (smtp1.betherenow.co.uk [87.194.0.68])
	by mx1.freebsd.org (Postfix) with ESMTP id DFED013C457
	for <freebsd-pf@freebsd.org>; Sat,  1 Sep 2007 08:44:46 +0000 (UTC)
	(envelope-from Greg.Hennessy@nviz.net)
Received: from thebeast (87-194-161-158.bethere.co.uk [87.194.161.158])
	by smtp1.bethere.co.uk (Postfix) with SMTP id 03A05D0027;
	Sat,  1 Sep 2007 09:44:39 +0100 (BST)
From: "Greg Hennessy" <Greg.Hennessy@nviz.net>
To: "'Max Laier'" <max@love2party.net>,
	<freebsd-pf@freebsd.org>
References: <BAY114-F335680D9BAF95E8DB983B4A5CE0@phx.gbl>	<000e01c7ebd9$1b94ddc0$52be9940$@Hennessy@nviz.net>
	<200708312052.08070.max@love2party.net>
In-Reply-To: <200708312052.08070.max@love2party.net>
Date: Sat, 1 Sep 2007 09:44:39 +0100
Message-ID: <001701c7ec74$581b3cd0$0851b670$@Hennessy@nviz.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcfsAWLLTC7/B7RxQhSAaXHHlsOgawAcb6iQ
Content-Language: en-gb
X-Antivirus: avast! (VPS 000770-2, 01/09/2007), Outbound message
X-Antivirus-Status: Clean
Cc: 
Subject: RE: Updating PF
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Sep 2007 08:44:47 -0000

> > You are running the version of PF which ships as standard with
> FreeBSD
> > 6.1. Which IIRC is the same as shipped with OpenBSD 3.6.
> 
> 3.7 in RELENG_6, 3.5 in RELENG_5, 4.1 in what is to become RELENG_7.
> 

My mistake Max :-), thanks for the correction. 

> If this box can take a downtime once in a while (i.e. not 100% mission
> critical) and you are interested in helping, then consider running the
> latest CURRENT.  It is in good shape and has the newest pf (4.1).

I would concur. 


> Just
> grab a snapshot or compile from source.
> 

Given that the OP is not confident building from source and is treating the
installation as an appliance by using FWBuilder to manage security policy,
Unless he has driver issues, I would second the advice w.r.t installing
OpenBSD 4.1 instead. 


Greg