{"id":36442004,"url":"https://github.com/go-freebsd/pf","last_synced_at":"2026-01-11T21:59:56.057Z","repository":{"id":47291777,"uuid":"81676622","full_name":"go-freebsd/pf","owner":"go-freebsd","description":"PF (Packet Filter)","archived":false,"fork":false,"pushed_at":"2021-07-21T15:27:02.000Z","size":58,"stargazers_count":41,"open_issues_count":0,"forks_count":14,"subscribers_count":6,"default_branch":"master","last_synced_at":"2024-06-19T00:22:01.803Z","etag":null,"topics":["cgo","freebsd","go","golang","kernel","packet-filter","packetfilter","pf"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-freebsd.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-02-11T19:28:14.000Z","updated_at":"2023-12-10T23:59:32.000Z","dependencies_parsed_at":"2022-08-19T13:41:13.252Z","dependency_job_id":null,"html_url":"https://github.com/go-freebsd/pf","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/go-freebsd/pf","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-freebsd%2Fpf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-freebsd%2Fpf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-freebsd%2Fpf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-freebsd%2Fpf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-freebsd","download_url":"https://codeload.github.com/go-freebsd/pf/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-freebsd%2Fpf/sbom","scorecard":{"id":431805,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-freebsd/pf","commit":"719aae74de40ea954013cf443e9a1e3bd6df1b7a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3,"checks":[{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":0,"reason":"Found 1/18 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 2-Clause \"Simplified\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 2 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:32:44.009Z","repository_id":47291777,"created_at":"2025-08-19T03:32:44.009Z","updated_at":"2025-08-19T03:32:44.009Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28324800,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-11T18:42:50.174Z","status":"ssl_error","status_checked_at":"2026-01-11T18:39:13.842Z","response_time":60,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cgo","freebsd","go","golang","kernel","packet-filter","packetfilter","pf"],"created_at":"2026-01-11T21:59:55.981Z","updated_at":"2026-01-11T21:59:56.049Z","avatar_url":"https://github.com/go-freebsd.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# PF (Packet Filter)\n\n[![GoDoc](https://godoc.org/github.com/go-freebsd/pf?status.svg)](https://godoc.org/github.com/go-freebsd/pf)\n[![Coverage 84.7%](https://img.shields.io/badge/coverage-84.7%25-green.svg)]()\n[![FreeBSD 10.3](https://img.shields.io/badge/freebsd-10.3-green.svg)](https://www.freebsd.org/releases/10.3R/announce.html)\n[![FreeBSD 11](https://img.shields.io/badge/freebsd-11-green.svg)](https://www.freebsd.org/releases/11.0R/announce.html)\n[![FreeBSD HEAD](https://img.shields.io/badge/freebsd-HEAD-green.svg)](https://svnweb.freebsd.org/base/head/)\n\nThe FreeBSD operating system has multiple packet filter build-in. One of\nthe packet filters was ported from OpenBSD and is called pf (packetfilter).\n\nPacket filtering restricts the types of packets that pass through network\ninterfaces entering or leaving the host based on filter rules as\ndescribed in. The packet filter can also replace addresses\nand ports of packets. Replacing source addresses and ports of outgoing\npackets is called NAT (Network Address Translation) and is used to\nconnect an internal network (usually reserved address space) to an\nexternal one (the Internet) by making all connections to external hosts\nappear to come from the gateway. Replacing destination addresses and\nports of incoming packets is used to redirect connections to different\nhosts and/or ports. A combination of both translations, bidirectional\nNAT, is also supported.\n\nThis go module enables easy access to the packet filter inside the\nkernel. The FreeBSD kernel module responsible for implementing pf is\ncalled pf.ko.\n\nSince the kernel interface is different between the operating\nsystems this version currently only works with FreeBSD.\n\nThe packet filter creates the pseudo-device node /dev/pf,\nit allows userland processes to control the behavior of the packet filter\nthrough an ioctl(2) interface. There are commands to enable and disable\nthe filter, load rulesets, add and remove individual rules or state table\nentries, and retrieve statistics. The most commonly used functions are\ncovered by this library.\n\nManipulations like loading a ruleset that involve more than a single\nioctl(2) call require a so-called ticket, which prevents the occurrence\nof multiple concurrent manipulations. Tickets are modeled as transaction\nobjects inside the library.\n\nWorking with pf directly on a remote connection can cause you to loose\nthe connection in case of a programming error. Make sure you have a\nsecond way to access the system e.g. a serial console.\n\n# Testing\n\nYou need to be root to execute the tests.\n\n\tmake test\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgo-freebsd%2Fpf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgo-freebsd%2Fpf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgo-freebsd%2Fpf/lists"}