Re: The State of NPF?

[christos%astron.com@localhost (Christos Zoulas)]

In article <CAErBiQXBC2spXYtZXUG9tZRigtyuCzn0zx1_9=y2A9c2jP9Vrw%mail.gmail.com@localhost>,
Ryan Brackenbury  <ryan.brackenbury%gmail.com@localhost> wrote:
>-=-=-=-=-=-
>
>First off, let me say that this message is *not* a rant: I simply hope to
>outline my experiences with the new NPF packet filter, and some of its
>shortcomings I have observed. This message is intended to spark some
>discussion on NPF's featureset and will hopefully draw some more attention to
>a great packet filter so it can get a little more development lovin'.
>
>
>
>At this point, I have been running npf as my home's gateway firewall for
>about 8 months. I am quite happy with it, since it has greatly improved the
>stability of my network over my previous (expensive, I might add) dd-wrt
>based router. My VOIP phone has much better sound than before, with
>little/no garbling even without QoS. Since initial setup, configuration
>changes have been a breeze. These virtues aside, a number limitations have
>become obvious.  It's entirely possible I am doing something wrong or am
>uneducated on some points, but here are the issues I've noted:
>

Thanks for you detailed report. Yes, all these are known deficiencies.
Some of them are easier to fix than others. We need to find someone to
work on them. I've saved a copy of your message and I hope to find the
time to open some PR's based on it so at least they don't get lost.

christos