> > > Third question: I'm not sure  the pppd launch belongs to the hotplug
> > > event manager.  Hotplug is run  before any network services,  so the
> > > connection would be  done before any firewall would  be up... As you
> > > see it's not really a question, just a loud thought ;-)
> >
> > It is convenient  though.  You could launch pppd in  an init script of
> > course and it wouldn't make  much difference, except if you replug the
> > modem.  By  the way, won't your  firewall barf if ppp0  does not exist
> > when you try to do (example) masquerading with it?
>
> No,  I've never  seen  a  firewall complaining  about  rules applied  on
> unknown interfaces.  It  would be a clear implementation  flaw if it did
> so, as it's good(tm) to prepare rules before the interface is up :-)

How about this as a solution: turn on ppp's demand dialing option.
That way, pppd can be used in the hotplug script (which is convenient)
without (hopefully) compromising security.

> Btw if  you include  a ppp  interface upping stage  in this  script, you
> have  to include a  ppp interface  downing stage,  otherwise the  ISP is
> just    not   aware    of   your    disconnection   through    the   PPP
> communication. This  was a  cause of problems  in early aDSL  days where
> IPs  were allocated  and  never freed  in  the ISP  side. Nowadays  this
> problem is no more afaik.

If you hit pppd with a SIGTERM, it tells the ISP it is going down, right?

All the best,

Duncan.



Liste de diffusion modem ALCATEL SpeedTouch USB
Pour se désinscrire : mailto:[EMAIL PROTECTED]

        

Reply via email to