热烈祝贺NetBSD有了自己的包过滤/NAT软件

lin_wang

http://mail-index.netbsd.org/sou ... 8/22/msg012835.html

Log Message:
Import NPF - a packet filter.  Some features:

- Designed to be fully MP-safe and highly efficient.

- Tables/IP sets (hash or red-black tree) for high performance lookups.

- Stateful filtering and Network Address Port Translation (NAPT).
  Framework for application level gateways (ALGs).

- Packet inspection engine called n-code processor - inspired by BPF -
  supporting generic RISC-like and specific CISC-like instructions for
  common patterns (e.g. IPv4 address matching).  See npf_ncode(9) manual.

- Convenient userland utility npfctl( with npf.conf(.

NOTE: This is not yet a fully capable alternative to PF or IPFilter.
Further work (support for binat/rdr, return-rst/return-icmp, common ALGs,
state saving/restoring, logging, etc) is in progress.

qishking

已经有了pf ipf,重复做轮子?

yhlovemj

pf ipf ipfw npf

多一个选择总是好的，而且可以互相学习！

lsstarboy

netbsd是不是一直用ipf？

lin_wang

是的，NetBSD一直用的是IPF，不过也有OpenBSD的PF