A ports freeze means that commits will be few and far between and only by approval.

pf 2.03 security =20

IGNORE: "Only for 5.0 and above"
OpenBSD pf as a kldmodule
Was Maintained by: mlaier@freebsd.org
Port Added: 13 Jun 2003 02:09:59
Also Listed In: ipv6

---

---

Packet Filter (from here on referred to as PF) is OpenBSD's system for 
filtering TCP/IP traffic and doing Network Address Translation. PF is also 
capable of normalizing and conditioning TCP/IP traffic and providing bandwidth
control and packet prioritization. 

Version 2.00 of this port has the same function set as found in OpenBSD 3.4

Information about pf can be found at the website of Daniel Hartmeier, the
original author of PF: http://www.benzedrine.cx/pf.html and OpenBSD PF FAQ: 

http://www.openbsd.org/faq/pf/

WWW: http://pf4freebsd.love2party.net/

-Max <reports@pf4freebsd.love2party.net>

CVSWeb : Main Web Site : Distfiles Availability : PortsMon

---

No installation instructions: this port has been deleted.

The package name of this deleted port was: pf_freebsd

---

Configuration Options

     No options to configure

---

Master Sites:

http://pf4freebsd.love2party.net/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

• port deleted on 2005-09-15
  REASON: included in base system since 5.3
  

- Remove security/pf and security/authpf ports. They were only useful on
  FreeBSD 5.0 - 5.2.1.

Requested by:   mlaier (maintainer) via linimon

Add size data, approved by maintainers.

Change maintainer address to maintainers @freebsd.org address.

Submitted by:   maintainer

pf has been included in the base system, since OSVERSION > 502105.

PR:             ports/63949
Submitted by:   maintainer

Fix for cdevsw change.

Approved by:    maintainer

Update to 2.0.3

Submitted by:   max@love2party.net (maintainer)

- Update to 2.02
  * Fix severe byte order related problem with "route-to" rules
    (much help from Joris Vandalon with testing here)
  * Make tcpdump's -w flag work for if_pfsync
  * Fix byte order and drop lock for icmp_error() calls.
    (note that it is necessary to allow icmp_error messages - from
    "block-policy return" - as FreeBSD does not know about pf's
    special tags, yet).

- update ALTQ-message to point to the new 5.2R-patchset from rofug.ro
  as well

PR:             ports/61318
Submitted by:   Max Laier <max@love2party.net> (maintainer)

Supersedes ports/59442 and previous hasty-fix, and fixes the following:
 - Build with __FreeBSD_version > 501114 (see bms commit)
 - Build with new route.h (no RTF_PRCLONING)
 - Don't use hardware assistance on framentation when DF is set.
 - Allow pftcpdump -w to be used with pfsync.

Found-by:       bento / Pyun YongHyeon
Submitted by:   Max Laier
PR:             ports/59548

Fix pf for ${OSVERSION} >= 501114, i.e. the 5.2 freeze point, when andre@'s
tcp hostcache changes took place.

Bump port version to 2.00:
 - Build again with FreeBSD_version > 501113 (if_xname)
 - Fix some byte order problems with route-to rules
 - Stable release

PR:             589037
Submitted By:   MAINTAINER

- Remove bogus file from patches

PR:             58354
Submitted by:   maintainer
No cookie for:  edwin

- Add patch to fix a build problem with NOINET6 defined.
- Bump PORTREVISION

PR:             57812
Submitted by:   maintainer

Remove NULL patch.

Update to 1.66

PR:             ports/57452
Submitted by    Max Laier <max@love2party.net> (maintainer)

Update port: security/pf - OpenBSD 3.4 pf

        Port update after API change in PFIL_HOOKS in -current and
        OpenBSD 3.4 Release.

PR:              ports/57305
Submitted by:   Max Laier <max@love2party.net>

FIXUP for possible remote DoS w/ scrub rules
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c?sortby=date

PR:             -
Submitted by:   mlaier@#bsdcode
Obtained from:  OpenBSD-Current

Add a patch to fix a u_int_16 overflow after new merged gcc.

Submitted by:           Pyun YongHyeon <yongari@kt-is.co.kr>
Reviewed by:            maintainer
tested ok by:           all current platforms

Add a critical patch to fix a problem with normalization, which does not
cause problems in normal operation but might lead to a pagefault => crash.

Submitted by:   Pyun YongHyeon <yongari@kt-is.co.kr>
Approved by:    maintainer

Fix 'make index' warning.

Pointed out by: parv_fm@emailgroups.net

Use a better comment in system passwd file when we create the user 'proxy'
at first time. No necessary to bump PRTREVISION so only force commit in
Makefile.

Approved by:    maintainer
Reformat pkg-install & pkg-message, and add 64-bit platform fix.
Note: pf now register its user as proxy:proxy which uid/gid is 62:62.

Submitted by:   maintainer
Add two patches to solve the following problems:

patch-ab
 - resolves a problem with a mbuf-tag in 5.1
 - Submitted by: Pyun YongHyeon <yongari@kt-is.co.kr>

patch-ac
 - pulls in two critical fixes from OpenBSD patch branch
 - Obtained from: OpenBSD

Change BROKEN to IGNORE tag in Makefile, suggested by: kris@
&& bump PORTREVISION.

Submitted by:   maintainer
Obtained from:  Andrzej Tobola <san@iem.pw.edu.pl>
Fix build if NOINET6 is defined, and bump PORTREVISION to aware this.

Submitted by:   Kjell <la3sg@frisurf.no>
Reviewed by:    maintainer
Correct wording in pkg-message to avoid a possible copy & paste
problem, and bump PORTREVISION.

Correct typo in URL.

Submitted by:   maintainer

Correct a typo.

Add pf 1.0, OpenBSD's pf (packetfilter) as in OpenBSD 3.3 as a loadable
kernel module.

PR:             52121
Submitted by:   Max Laier <max@love2party.net>

12 vulnerabilities affecting 34 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities