npf
npf copied to clipboard
rmind
NPF: packet filter with stateful inspection, NAT, IP sets, etc.
Hello! I am not sure about the category of this issue (bug report, improvement suggestion, ...), so I chose to create a blank one. Using npf in NetBSD 9.0 (release),...
Hi Try to build on ubuntu 21.10 with GCC 11.2 but get this error: In file included from /usr/include/string.h:519, from stand/npf_stand.h:26, from npf.h:21, from npf_impl.h:37, from npf_rproc.c:25: In function ‘stpncpy’,...
Idk whats wrong, everything compiled ok... Using Debian 10.4. root@npf:~/npf# npfctl start npfctl: fstat: No such file or directory **npfctl debug** works Thanks in advance.
Hi, is it possible to pass/block packet according to its size? I need to block outgoing UDP/123 (NTP) packets bigger than 128B to disable DDoS amplification. There is nothing about...
Hello, When I create a new rule for ruleset with `apply "log"` via npfctl I get an error: `syntax error near 'log'` Example: ``` # npfctl rule "test" add pass...
Configuration exporting (`npfctl save`) does not capture the following: - ALG and its state associated with the NAT entry (see `npf_nat_export()`). - Rule procedure calls and parameters (see `npf_rprocset_export()`). The...
- Race condition when unloading ALG module: `npf_nat_freealg()` vs lock-free readers. - Inspection as a loop in `npf_alg_conn()` is not particularly efficient. It could be optimized to be: 1) per-protocol...
