Ailemizin en güvenli işletim sistemi OpenBSD’nin 4.6 sürümü çıktı. Detaylara buradan ulaşılabilir. 4.6 sürümünün beni en fazla ilgilendiren bölümü ise yine Packet Filter’da yapılan değişiklikler.

pf(4) improvements:

• Enabled pf(4) by default in the rc.conf(8).
• Removed pf(4) scrub rules, and only do one kind of packet reassembly. Rulesets with scrub rules need to be modified because of this.
• Regular rules can now have per-rule scrub options.
• Added new “match” keyword which only applies rule options but does not change the current pass/block state.
• Make all pf(4) operations transactional to improve atomicity of reloads.
• Stricter pf(4) checking for ICMP and ICMPv6 packets.
• Various improvements to pfsync(4) to lower sync traffic bandwidth and optionally allow active-active firewall setups.
• Fix pf(4) scrub max-mss for IPv6 traffic.

The post OpenBSD 4.6 çıktı first appeared on Complexity is the enemy of Security.