Hacker News Reader

Author here. No, OpenBSD's `pf` is not affected.

IIRC FreeBSD has a quite outdated version of pf, that hasn't been synced with OpenBSD upstream in quite a while.

I like FreeBSD for the breadth of features, but in some cases it feels like they've pushed it to an extreme, a bit of a kitchen sink. I don't think you need three different firewalls, a single good one would do a better job.

I don't know that it's necessarily outdated, more than it's a fork that evolved differently, and I don't think they'll reconverge.

I actively use ipfw and pf (at the same time!) because neither one can do all the things I need. I've never used the third one though.

That's why I prefer OpenBSD vs NetBSD and FreeBSD. Correctness at the core technologies before pushing any new cool feature.

>I don't think you need three different firewalls, a single good one would do a better job.

This.

I'm subscribed to their announcement list (where they publish errata) and I haven't seen anything yet.