From owner-freebsd-pf@FreeBSD.ORG  Tue Feb 14 17:56:39 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 98FEA16A422
	for <freebsd-pf@freebsd.org>; Tue, 14 Feb 2006 17:56:39 +0000 (GMT)
	(envelope-from sullrich@gmail.com)
Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.201])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 28B3943D48
	for <freebsd-pf@freebsd.org>; Tue, 14 Feb 2006 17:56:38 +0000 (GMT)
	(envelope-from sullrich@gmail.com)
Received: by zproxy.gmail.com with SMTP id s18so1371652nze
	for <freebsd-pf@freebsd.org>; Tue, 14 Feb 2006 09:56:38 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=bpPDTQHYTtp8EizjgliIzVVLkG2qwnSuL7tZoRmp7ODdLrOmGzhnyVC8QIesGhITPrucRzOGAT5aKy3TSdh+OGEkg9S/Ruti+rbFLx6rgBZ4jRDkwjEqxx40e3TJkN6QFm0CvUr8Qwdt8NkL/Dl++gV92tDpZYrargjePNEaPug=
Received: by 10.64.180.12 with SMTP id c12mr1936313qbf;
	Tue, 14 Feb 2006 09:56:38 -0800 (PST)
Received: by 10.64.181.12 with HTTP; Tue, 14 Feb 2006 09:56:38 -0800 (PST)
Message-ID: <d5992baf0602140956q21d28541p3367fbc0c2c7acaf@mail.gmail.com>
Date: Tue, 14 Feb 2006 12:56:38 -0500
From: Scott Ullrich <sullrich@gmail.com>
To: worm@chm.org.ua
In-Reply-To: <43F213F2.3080003@chm.org.ua>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <43F213F2.3080003@chm.org.ua>
Cc: freebsd-pf@freebsd.org
Subject: Re: PF: dynamic rules
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Feb 2006 17:56:39 -0000

On 2/14/06, Victor V. Melnichenko <worm@chm.org.ua> wrote:
> I have some problem with PF.
> I have pppoe server based on mpd.
> What i want:
> When client connect to the server some rules (e.g. altq ... priq ...
> etc) must be load and apply to the interface ng0 for example. When
> client disconnected from server this rules must be delete from rule-table=
.
> In IPFW this things works fine...
>
> Question: how can i do this in PF?

You're best bet is to link into ppp-linkup (generally in
/usr/local/sbin/) which MPD invokes after a session is nailed up. =20
You could easily tie in you're custom ALTQ rules with this script.

Hope this helps!

Scott