From owner-freebsd-current@FreeBSD.ORG Sun May 11 19:01:12 2014 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C35C877D; Sun, 11 May 2014 19:01:12 +0000 (UTC) Received: from theravensnest.org (theraven.freebsd.your.org [216.14.102.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "cloud.theravensnest.org", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8EBEA2B91; Sun, 11 May 2014 19:01:11 +0000 (UTC) Received: from [192.168.0.7] (cpc14-cmbg15-2-0-cust307.5-4.cable.virginm.net [82.26.1.52]) (authenticated bits=0) by theravensnest.org (8.14.7/8.14.7) with ESMTP id s4BJ17Er086975 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Sun, 11 May 2014 19:01:09 GMT (envelope-from theraven@FreeBSD.org) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\)) Subject: Re: Ordering for network-sensitive rc scripts From: David Chisnall In-Reply-To: Date: Sun, 11 May 2014 20:01:02 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Adrian Chadd X-Mailer: Apple Mail (2.1874) Cc: "FreeBSD-CURRENT@freebsd.org Current" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 May 2014 19:01:12 -0000 On 17 Apr 2014, at 09:30, Adrian Chadd wrote: > Can't we add a devd hook to do that? I tried doing this, but it turns out that wlan devices don't appear to = send devd LINK_UP / LINK_DOWN events. It would be nice to have a clean = solution to this. By default, using the stock rc scripts, my router is = currently not able to forward packets from the WiFi until I've logged = into it and manually run 'service pf restart', which is a bit crazy. = I've hacked around it by having a script run from rc.local that sleeps = for 60 seconds and then restarts a few things, but that's really, really = ugly. =20 On closer inspection, pf doesn't fail silently, it complains about a = syntax error in my config file because wlan0 is not a known interface. We therefore have an rc ordering problem if you want to use pf and WiFi = at the same time. This problem was introduced some time between 9.2 and = 10.0. David