On: OpenBSD PF versus FreeBSD PF

[josteink]

> And the PF syntax is the most approachable in all of open source Unix.

As someone not deeply into the BSDs and who has never tried pf, I would love to see this claim illustrated with a few examples.

Are there any “definitive” or authoritative beginner guides for those merely curious, but without a production system to test on?

[tedunangst → josteink]

Find your favorite topic in https://www.openbsd.org/faq/pf/index.html and compare to how you'd do it in your favorite firewall.

[lacrosse_tannin → tedunangst]

How do you do endpoint independent nat?

[voytec → josteink]

> And the PF syntax is the most approachable in all of open source Unix.

I actually find ipfw(8) [0] syntax more human-friendly.

[0] https://man.freebsd.org/cgi/man.cgi?query=ipfw&sektion=8&for...

[stock_toaster → voytec]

I wish dragonflyBSD’s ipfw3 would get ported to freeBSD.

[i_am_a_peasant → josteink]

I'd go for the handbook in that case:

https://docs.freebsd.org/en/books/handbook/firewalls/#firewa...

[nesarkvechnep → josteink]

Get yourself “The Book of PF” and get to work.

[fragmede → josteink]

Explore in the direction you want to go:

https://chat.openai.com/share/e1e2a207-5fb4-4f12-9f3c-7850ff...