Re: ppp and pf interacting badly?

2006-01-27 Thread Peter 

--- cpghost [EMAIL PROTECTED] wrote:

 Hello,
 
 has anyone else seen this strange interaction between
 (user-)ppp and pf (on RELENG_6)?
 
 When configuring tun0 as external interface in pf.conf,
 pf won't start when booting, because ppp has not yet had
 time to initialize tun0. Result is, that pf is then
 disabled (!).
 
 After booting, calling
 /etc/rc.d/pf start
 manually works well though, since tun0 is now there
 and pf can initialize.
 
 Am I the only one seeing this happen?
 
 Is there any way to tell pf startup script to wait for ppp
 until all needed interfaces have really come up?

From the OpenBSD 3.8 manpage (should be good for you):

Host name resolution and interface to address translation are done
at ruleset load-time.  When the address of an interface (or host
name) changes (under DHCP or PPP, for instance), the ruleset must
be reloaded for the change to be reflected in the kernel.  Sur-
rounding the interface name (and optional modifiers) in parentheses
changes this behaviour.  When the interface name is surrounded by
parentheses, the rule is automatically updated whenever the inter-
face changes its address.  The ruleset does not need to be reload-
ed.  This is especially useful with nat.

--
Peter







__ 
Find your next car at http://autos.yahoo.ca
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: ppp and pf interacting badly?

2006-01-27 Thread cpghost 
On Fri, Jan 27, 2006 at 07:12:14PM -0500, Peter wrote:
 --- cpghost [EMAIL PROTECTED] wrote:
  Is there any way to tell pf startup script to wait for ppp
  until all needed interfaces have really come up?
 
 From the OpenBSD 3.8 manpage (should be good for you):
 
 Host name resolution and interface to address translation are done
 at ruleset load-time.  When the address of an interface (or host
 name) changes (under DHCP or PPP, for instance), the ruleset must
 be reloaded for the change to be reflected in the kernel.  Sur-
 rounding the interface name (and optional modifiers) in parentheses
 changes this behaviour.  When the interface name is surrounded by
 parentheses, the rule is automatically updated whenever the inter-
 face changes its address.  The ruleset does not need to be reload-
 ed.  This is especially useful with nat.

Ah, good point! I'll try this on the next maintenance window!
Thanks for the valuable hint.

Are you sure it also works for interfaces that don't exist yet?
It's not a question of tun0 changing addresses (static IP in
this particular case), but of tun0 not existing before ppp has
a chance to start at all?

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]