Comments on: FreeBSD PF updated to 4.5 for FreeBSD 9

By: Jean Aumont

Jean Aumont — Thu, 15 Sep 2011 07:10:03 +0000

I wish you would have used the latest PF version available (4.9), despite the fact that it would have break some rule set.

Many performance improvement have been done between 4.5 and 4.9 and we will be missing them in this new release of FreeBSD

I do not understand/share this decision since eventually I hope the port will go to a revision higher than 4.5 and at that point rule set will need to be review anyway.

People will be doing the job of porting PF twice, to version 4.5 and eventually to a higher version…. Anyway, tank you a lot for finally porting a newer version of PF to FreeBSD 9

By: Timothy

Timothy — Thu, 11 Aug 2011 14:57:00 +0000

The syntax in PF that is changed is trivial, very trivial. But it opens the gate for more powerful rules. Changing the syntax can be scripted, I have changed over many OpenBSD firewalls and not had problems.

By: Chris Buechler

Chris Buechler — Sat, 23 Jul 2011 16:40:34 +0000

Just to clarify, that reasoning has no consideration at all with pfSense users, because we would automatically generate the ruleset to the appropriate syntax. It’s only for users of stock FreeBSD who have to manually configure pf.conf. When we’re working on upstream code we have to take the needs of the entire FreeBSD community into consideration, and what’s acceptable to the developer community as a whole.

By: James Carter

James Carter — Sat, 23 Jul 2011 03:25:13 +0000

But as a whole most of us would rather have a working system than a broken system. Many of us use pfsense as an edge device and thus breaking said device would take us down. We also may run our production environments utilizing freebsd services… also potentially affected by the decision. I am happy for the decision. It is nice to know in advance that such changes will be coming and to have time to change rules in various places ahead of time. Thank you Chris, pfsense and freebsd maintainers.

By: bob john

bob john — Wed, 20 Jul 2011 10:31:53 +0000

I see, but it is inevitable that people will want to run a newer version of PF.

By: Chris Buechler

Chris Buechler — Tue, 19 Jul 2011 22:10:00 +0000

bob: That’s explained in the post. OpenBSD was fine with breaking everyone’s rulesets just by upgrading your OS. FreeBSD devs weren’t fine doing that.

By: bob john

bob john — Tue, 19 Jul 2011 21:53:39 +0000

Why wouldn’t you update to the latest version of PF? Dumb.

By: Chris Buechler

Chris Buechler — Thu, 14 Jul 2011 18:56:24 +0000

adem: 2.1 roadmap here http://redmine.pfsense.org/projects/pfsense/versions/5

more info to come. It will be FreeBSD 9.

By: adem darguner

adem darguner — Thu, 14 Jul 2011 13:20:49 +0000

Hi Everyone,

When will Pfsense 2.1 version? Pfsense 2.1 version of FreeBSD 9.0 on the run? Is there a roadmap for Pfsense 2.1? Does anyone have information?

Thank you.

By: mhab12

mhab12 — Thu, 30 Jun 2011 02:44:18 +0000

As a paying customer it makes me even happier with my decision to support such a great project which contributes well beyond just pfSense. Thanks everyone!