5 ms·

Yay! I get to spend 5 hours figuring out how to update the syntax for my pf.conf rules.

by jrcii 10y ago

SSLy 10y ago
What? Where do you see notes about it being changed?
SixSigma 10y ago
Gets PF for free, complains.
- jrcii 10y ago
  Gmail is free, would you be happy if they updated it and your email didn't work anymore? I love OpenBSD but they constantly change the rule syntax for pf, which invalidates huge swaths of forum posts and other online documentation, even published books. The man page doesn't contain every conceivable explanation and example for every scenario either, nor could it, so that is also not a solution. Whether or not the price is free, the use is not, as it requires hours of valuable time to implement.
  - pfortuny 10y ago
    You have to ACT proactively to upgrade OpenBSD, unlike gmail.
  - SixSigma 10y ago
    > Gmail is free, would you be happy if they updated it and your email didn't work anymore? I would shrug, meh and do something else. I've had my lifestyle made illegal a couple of times. Perspective.
  - chriscappuccio 10y ago
    The last and only major PF syntax change was, what, 5 years ago now ? 4 years ago ? Any other changes are relatively minor and reflect other changes, such as features being removed or added.
  - hackuser 10y ago
    > Gmail is free Perhaps this is a bit doctrinaire, but it's an important distinction: You pay for Gmail with your privacy and personal information (you can say they are worthless to you, but you do pay). OpenBSD is truly free-as-in-beer. You also have no end-user control or 'freedom to tinker' with Gmail. OpenBSD is free-as-in-speech, also.
ben_bai 10y ago
I'm assuming you run 5.9. There is only one entry in http://www.openbsd.org/plus60.html http://www.openbsd.org/plus60.html so I would assume you don't have to change your rules. Also pfctl -n should tell you. "In pf.conf(5), change the parser to make af-to on pass out rules an error. This fixes a bug where a nonworking configuration could be loaded."

Yay! I get to spend 5 hours figuring out how to update the syntax for my pf.conf rules.

by jrcii 10y ago

Yay! I get to spend 5 hours figuring out how to update the syntax for my pf.conf rules.

SSLy 10y ago

What? Where do you see notes about it being changed?

SixSigma 10y ago

Gets PF for free, complains.

jrcii 10y ago
Gmail is free, would you be happy if they updated it and your email didn't work anymore? I love OpenBSD but they constantly change the rule syntax for pf, which invalidates huge swaths of forum posts and other online documentation, even published books. The man page doesn't contain every conceivable explanation and example for every scenario either, nor could it, so that is also not a solution. Whether or not the price is free, the use is not, as it requires hours of valuable time to implement.
- pfortuny 10y ago
  You have to ACT proactively to upgrade OpenBSD, unlike gmail.
- SixSigma 10y ago
  > Gmail is free, would you be happy if they updated it and your email didn't work anymore? I would shrug, meh and do something else. I've had my lifestyle made illegal a couple of times. Perspective.
- chriscappuccio 10y ago
  The last and only major PF syntax change was, what, 5 years ago now ? 4 years ago ? Any other changes are relatively minor and reflect other changes, such as features being removed or added.
- hackuser 10y ago
  > Gmail is free Perhaps this is a bit doctrinaire, but it's an important distinction: You pay for Gmail with your privacy and personal information (you can say they are worthless to you, but you do pay). OpenBSD is truly free-as-in-beer. You also have no end-user control or 'freedom to tinker' with Gmail. OpenBSD is free-as-in-speech, also.

ben_bai 10y ago

I'm assuming you run 5.9. There is only one entry in http://www.openbsd.org/plus60.html http://www.openbsd.org/plus60.html so I would assume you don't have to change your rules. Also pfctl -n should tell you. "In pf.conf(5), change the parser to make af-to on pass out rules an error. This fixes a bug where a nonworking configuration could be loaded."