Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by nvy on Friday September 08, 2023 @03:24PM
(#37438215)
I haven't been able to determine if OpenBSD's `pf` is also affected. Anyone know?
[ Parent
| on HN ]
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by asveikau on Friday September 08, 2023 @03:54PM
(#37438590)
I'm subscribed to their announcement list (where they publish errata) and I haven't seen anything yet.
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by enrico204 on Friday September 08, 2023 @04:34PM
(#37439048)
Author here. No, OpenBSD's `pf` is not affected.
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by rollcat on Friday September 08, 2023 @05:10PM
(#37439480)
IIRC FreeBSD has a quite outdated version of pf, that hasn't been synced with OpenBSD upstream in quite a while.
I like FreeBSD for the breadth of features, but in some cases it feels like they've pushed it to an extreme, a bit of a kitchen sink. I don't think you need three different firewalls, a single good one would do a better job.
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by toast0 on Friday September 08, 2023 @09:47PM
(#37441388)
I don't know that it's necessarily outdated, more than it's a fork that evolved differently, and I don't think they'll reconverge.
I actively use ipfw and pf (at the same time!) because neither one can do all the things I need. I've never used the third one though.
Re:CVE-2023-4809: FreeBSD pf bypass when using IPv6
by anthk on Saturday September 09, 2023 @06:28AM
(#37443856)
That's why I prefer OpenBSD vs NetBSD and FreeBSD. Correctness at the core technologies before pushing any new cool feature.
>I don't think you need three different firewalls, a single good one would do a better job.
This.