I know I'm getting ahead of myself a bit, but
are pf + ALTQ on the roadmap for m0n0wall instead
of ipfw + ipnat + ipfilter now that we have a
FreeBSD 5.3 based m0n0wall Beta?
I only ask because:
a.) People have mentioned at various times in the
past that pf might be the solution to a
number of the current quirks or problems
b.) I'm reading the pf man pages and it does indeed
look like a much more unified, complete, and
However, I realize that a ton of work would be
necessary to make the switch, learn to work around
any quirks in pf (assuming that there aren't any
show stoppers), then eventually get back to the
level of reliability we have with
ipfw + ipnat + ipfilter. Frankly, it seems that
either a separate project or at least a version
fork (kind of like the difference between FreeBSD
4.x and 5.x) would be necessary.
At first glance it looks like pfSense is doing
just that, but a deeper look reveals that the
pfSense project doesn't intend to support WRAP
or Soekris platforms in the near future, and
these platforms are my primary interest.
Curious to know Manuel's and other's thoughts
on the subject.
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v) 423-559-5145 (f)