From owner-freebsd-questions Fri May 7 18:55:39 1999 Delivered-To: freebsd-questions@freebsd.org Received: from alice.gba.oz.au (gba-254.tmx.com.au [203.9.155.254]) by hub.freebsd.org (Postfix) with SMTP id E6A4D14C0A for ; Fri, 7 May 1999 18:55:30 -0700 (PDT) (envelope-from gjb-freebsd@gba.oz.au) Received: (qmail 12552 invoked by uid 1001); 8 May 1999 01:51:48 -0000 Message-ID: <19990508015148.12551.qmail@alice.gba.oz.au> X-Posted-By: GBA-Post 1.03 20-Sep-1998 X-PGP-Fingerprint: 5A91 6942 8CEA 9DAB B95B C249 1CE1 493B 2B5A CE30 Date: Sat, 08 May 1999 11:51:47 +1000 From: Greg Black To: Danil Shebunin Cc: Brian Somers , freebsd-questions@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG Subject: Re: Kernel PPP (PPPD): ip-up & ip-down scripts execution References: In-reply-to: of Fri, 07 May 1999 14:34:57 +0400 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > Your best bet is to run pppd as root. Alternatively, use user-ppp > > and the ``set filter'' command. > "[...] The scripts (ip-up, ip-down and others - D.S.) are executed as > root (with the real and effective user-id set to 0), so that they can do > things such as update routing tables or run privileged daemons. [...]" > I don't see any obstructions to run ipfw from ip-up script - but it don't > run. I do 'ipfw show' and it shows me firewall rules after machine boot, > not the ones, I set in ip-up. There is definitely something dysfunctional in the running of those scripts in kernel ppp (certainly in 2.2.8, not tested since). I could not easily discover what the problem was and abandoned it because the timeout code is also broken in pppd and that mattered to me. I switched to user-ppp and all my problems went away. Because I don't have spare boxes to test ppp-type problems with, I have not reported the kernel-ppp problems as I cannot provide any useful data. I do recall that the scripts seemed to run in part, but never did everything that I wanted them to do. > And user ppp... Well, I think it will be harder to manage user ppp daemon > from scripts. I very much doubt this -- take some time to fully read the documentation and I think you'll find you can do anything you want to, and you'll benefit from using a package that is both actively maintained and apparently more useful. -- Greg Black To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message