From owner-freebsd-questions Sun Dec 31 12:20: 5 2000 From owner-freebsd-questions@FreeBSD.ORG Sun Dec 31 12:20:02 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from grumpy.dyndns.org (user-24-214-56-41.knology.net [24.214.56.41]) by hub.freebsd.org (Postfix) with ESMTP id 536AA37B400 for ; Sun, 31 Dec 2000 12:20:01 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by grumpy.dyndns.org (8.11.1/8.11.1) with ESMTP id eBVKJwQ08173; Sun, 31 Dec 2000 14:19:58 -0600 (CST) (envelope-from dkelly@grumpy.dyndns.org) Message-Id: <200012312019.eBVKJwQ08173@grumpy.dyndns.org> X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 To: "J.R." Cc: freebsd-questions@FreeBSD.ORG From: David Kelly Subject: Re: dhcp and firewalls In-reply-to: Message from "J.R." of "Sun, 31 Dec 2000 09:51:49 EST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sun, 31 Dec 2000 14:19:58 -0600 Sender: dkelly@grumpy.dyndns.org Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Please don't send html to mail lists. My reply at the end. "J.R." writes: > This is a multi-part message in MIME format. > > ------=_NextPart_000_0007_01C0730F.4B459950 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > when writing firewall rules, how does one simply establish "oip", when = > the outside IP is dynamic as with Cogeco cable? > thanx > J.R. =20 > > ------=_NextPart_000_0007_01C0730F.4B459950 > Content-Type: text/html; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > > > charset=3Diso-8859-1"> > > > > >

when writing firewall rules, = > how does one=20 > simply establish "oip", when the outside IP is dynamic as with Cogeco=20 > cable?

thanx

size=3D2>J.R.

> > ------=_NextPart_000_0007_01C0730F.4B459950-- This works for me: nic="fxp0" ip=$(/sbin/ifconfig $nic | grep netmask | awk '{print $2}') Am experimenting with an /etc/dhclient-exit-hooks file to see if I can re-init my firewall on address change. The only hairy thing is one doesn't want to reset the firewall unless the address really changed. For details see my posting on -questions, Dec 12, 2000. -- David Kelly N4HHE, dkelly@hiwaay.net ===================================================================== The human mind ordinarily operates at only ten percent of its capacity -- the rest is overhead for the operating system. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message