Re: pf vs ipf

[Telent <telent@mordac.info>]

> They release a
> kit which allows users to compile their own kernel but if you do, and
> it is not a standard, GENERIC, kernel, you are in unsupported land. 
> Why do they ship config(8) in this case ?  Why would anyone want to
> use it if the result of doing so means they are on their own ?

Because the people that SHOULD be using config(8) and recompiling their
kernels do not NEED to come squalling to misc@ when something goes
wrong, and the OpenBSD team recognizes this.  I admit that I'm not there
yet, which is why I stick with GENERIC on all my servers.

Same principle as those that rebuild from the bleeding edge of -current
every night.  If you do it on, say, a production server, and something
breaks, then yes, you are on your own.  To quote Theo... "We ship
secure, but we provide rope."

Your "DarrenBSD" is entirely different.  It's the equivalent of OpenBSD
changing the Red Hat Linux kernel to an OpenBSD kernel, billing
themselves as Red Hat Linux, putting the Red Hat logo on their webpages,
and saying that they "Just changed ONE thing about Red Hat.  Get the
stability and security of the OpenBSD kernel with the proven track
record of Red Hat!"

And then they send all their users to the Red Hat lists for support.

-Telent