Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Mar 2001 07:33:54 -0500
From:      Graywane <graywane@home.com>
To:        Mike Harding <mvh@ix.netcom.com>
Cc:        zingelman@fnal.gov, stable@FreeBSD.ORG
Subject:   Re: /etc/default/rc.conf bad default ipfilter_flags?
Message-ID:  <20010314073354.A4019@home.com>
In-Reply-To: <20010314113640.741AF1140FC@netcom1.netcom.com>; from mvh@ix.netcom.com on Wed, Mar 14, 2001 at 03:36:40AM -0800
References:  <Pine.GSO.4.30.0103132009500.28627-100000@nova.fnal.gov> <20010314113640.741AF1140FC@netcom1.netcom.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--8t9RHnE3ZwKMSgU+
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Wed, Mar 14, 2001 at 03:36:40AM -0800, Mike Harding wrote:
> I can confirm that the "-E" seems to be unecessary for both kernel and
> kernel module loads.

I agree.

> I can also confirm that ppp does not play well with ipfilter because
> ipfilter needs a 'ipf -y' to pick up the dynamically configured
> interfaces - it's set up before these interfaces exist, so that any
> rules applying to them don't work!  I stick a 'ipf -y' near the end of
> pass 1 in /etc/rc.network but this is my local hack.

Really? On my OpenBSD machine ipfilter doesn't seem to have a problem with
ppp. Perhaps they have an ipf -y somewhere in the startup files but I didn't
think so. I'll check it out.

--8t9RHnE3ZwKMSgU+
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjqvZTIACgkQeHdFaBWUGN3ugQCfVeHpLtWh9Cun0GMKvdCi3fp/
Xq0AoICsBj+joonAaMt6F3x14CX7RPvo
=63jr
-----END PGP SIGNATURE-----

--8t9RHnE3ZwKMSgU+--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010314073354.A4019>