Date: Wed, 4 Jul 2001 01:24:00 -0700 From: "Crist J. Clark" <cristjc@earthlink.net> To: parv <parv_@yahoo.com> Cc: Haikal Saadh <wyldephyre2@yahoo.com>, questions@FreeBSD.ORG Subject: Re: ipf -y 'ing using user ppp Message-ID: <20010704012400.H1476@blossom.cjclark.org> In-Reply-To: <20010704032241.A1895@moo.holy.cow>; from parv_@yahoo.com on Wed, Jul 04, 2001 at 03:22:41AM -0400 References: <PAELLGOEIMDLEJNEBOBOCEIACBAA.wyldephyre2@yahoo.com> <20010704032241.A1895@moo.holy.cow>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jul 04, 2001 at 03:22:41AM -0400, parv wrote:
> so, Haikal Saadh shared this in my lifetime...
> >
> > Hi all,
> > I've come to understand that everytime i dialup using user ppp, I need to
> > resync the filter rules using 'ipf -y'. Now, my problem is, everytime[1] I
> > dial up, I have to ipf -y manually myself. I would put a line in ppp.linkup,
> > but the thing is, ppp.linkup gets run with the priviledges of the user who
> > just invoked ppp, and as i have non-root users dialing out, it does not
> > work.
> >
> > Can anyone tell me how to automatically ipf -y when the ppp link goes up?
> > Especially when invoked by non-root users?
Err... man 8 ipf,
-y (SOLARIS 2 ONLY) Manually resync the in-kernel
interface list maintained by IP Filter with the
current interface status list.
Note the "SOLARIS 2 ONLY?" I've never had to use '-y,' but I do have a
similar problem. Or do I have a different manpage?
I do not start ppp(8) at boot, but I do start ipf(8). The tun(4)
interface does not exist until ppp(8) conjures it up, so I cannot load
useful ipf(8) and ipnat(8) rules until I start ppp(8). I have the same
issue with ppp.linkup and not running ppp(8) as root.
That said, once I run ppp(8) once, I can bring the tun(4) interface up
and down as much as I wish and I never need to touch ipf(8) or
ipnat(8) again. No need for the '-y' option.
--
Crist J. Clark cjclark@alum.mit.edu
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010704012400.H1476>