From owner-freebsd-pf@FreeBSD.ORG Sat Dec 1 23:04:20 2012 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 92DBECE1 for ; Sat, 1 Dec 2012 23:04:20 +0000 (UTC) (envelope-from kevin.wilcox@gmail.com) Received: from mail-pb0-f54.google.com (mail-pb0-f54.google.com [209.85.160.54]) by mx1.freebsd.org (Postfix) with ESMTP id 5E4B98FC0C for ; Sat, 1 Dec 2012 23:04:20 +0000 (UTC) Received: by mail-pb0-f54.google.com with SMTP id wz12so1209868pbc.13 for ; Sat, 01 Dec 2012 15:04:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=SqkZ9zcMD8PVH0jL5unoYhTAvOcqy2EtfBeh47YXg7s=; b=qwyZZJq2POAOlw3gBdRiVSknyBA+c8yqpcJgHYYiFwDRNy2ZGz2tWXFpOslcOXbQiO pk0BXdopoiM74nqX4uiFoCOjkWrz6lKPP4JLWhEt3DznbsBSUMrZBvUu419ErZorJi9f ZQYNjQ8P5gsGRU7MvlyYBWEjUW0JpQORjm45HfJ0Ltqx7sLY+dlEYkHPnEU3zslwh0AZ aNZAyQSvtbi6M1wQZKJcg9cXWY6V2XXUf4bAm/jJMO95CjeDIhUyu7NLMjxYVZr1IKoT sAOOjZwg1dEv1AQcBqG4gRMExhd785O7zmgk1iruhw8kjXiK+90ifa8X0zRCuOxpCYcL BH+Q== MIME-Version: 1.0 Received: by 10.68.225.70 with SMTP id ri6mr17301699pbc.41.1354403059675; Sat, 01 Dec 2012 15:04:19 -0800 (PST) Received: by 10.68.8.2 with HTTP; Sat, 1 Dec 2012 15:04:19 -0800 (PST) Received: by 10.68.8.2 with HTTP; Sat, 1 Dec 2012 15:04:19 -0800 (PST) In-Reply-To: <33ED1440B7AE4229B166A4CE4C131DF6@yahoo.com> References: <33ED1440B7AE4229B166A4CE4C131DF6@yahoo.com> Date: Sat, 1 Dec 2012 18:04:19 -0500 Message-ID: Subject: Re: pf rules vs DHCP From: Kevin Wilcox To: Laszlo Danielisz Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: freebsd-pf@freebsd.org X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Dec 2012 23:04:20 -0000 On Dec 1, 2012 3:55 PM, "Laszlo Danielisz" wrote: > > Hi Everybody, > > Today I just found out that my pf rules are not loaded on boot if I configure my machine's interface with DHCP If you use your interface in your rules, for example, pass in on em0 then you can tell pf to adapt to a changing IP on that interface with pass in on (em0) This works for interfaces with DHCP-provided addresses but introduces some ambiguity. kmw