Re: vanilla OpenBSD 2.4 w/ IPFilter 3.2.10

[Kjell Wooding <kwooding@codetalker.com>]

>If so, what's the best method of moving to 3.2.10? Would cvsupping src/sys and
>rebuilding an entirely new kernel break lots of things? Am I better off just
>downloading ipfilter from coombs.anu.edu.au and installing into the current
>vanilla kernel source tree?

If you download the vanilla source, you'd better be prepared to make a bunch of changes

the version of ipf in -current is 3.2.10p1.

It is probably possible to just upgrade the ipf kernel changes, build a new kernel, then upgrade the ipf userland code, if you know what files to update. I can probably help you with that, if you need.

It is probably best, however, to upgrade to a recent snapshot The most recent on ftp.openbsd.org has the latest ipfilter. Note that photurisd and isakmpd are both broken in that snapshot.

And, of course, 2.5 will have 3.2.10p1 as well.