From owner-freebsd-questions@FreeBSD.ORG Sat Jan 28 01:05:48 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E858F16A420 for ; Sat, 28 Jan 2006 01:05:48 +0000 (GMT) (envelope-from cpghost@cordula.ws) Received: from fw.farid-hajji.net (fw.farid-hajji.net [213.146.115.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2899B43D48 for ; Sat, 28 Jan 2006 01:05:48 +0000 (GMT) (envelope-from cpghost@cordula.ws) Received: from epia2.farid-hajji.net (epia-2 [192.168.254.11]) by fw.farid-hajji.net (Postfix) with ESMTP id A9267DA8B1; Sat, 28 Jan 2006 02:03:07 +0100 (CET) Date: Sat, 28 Jan 2006 02:06:30 +0100 From: cpghost To: Peter Message-ID: <20060128010630.GA38672@epia2.farid-hajji.net> References: <20060127230539.GA60009@epia2.farid-hajji.net> <20060128001214.90433.qmail@web60024.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20060128001214.90433.qmail@web60024.mail.yahoo.com> User-Agent: Mutt/1.5.11 Cc: freebsd-questions@freebsd.org Subject: Re: ppp and pf interacting badly? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Jan 2006 01:05:49 -0000 On Fri, Jan 27, 2006 at 07:12:14PM -0500, Peter wrote: > --- cpghost wrote: > > Is there any way to tell pf startup script to wait for ppp > > until all needed interfaces have really come up? > > >From the OpenBSD 3.8 manpage (should be good for you): > > Host name resolution and interface to address translation are done > at ruleset load-time. When the address of an interface (or host > name) changes (under DHCP or PPP, for instance), the ruleset must > be reloaded for the change to be reflected in the kernel. Sur- > rounding the interface name (and optional modifiers) in parentheses > changes this behaviour. When the interface name is surrounded by > parentheses, the rule is automatically updated whenever the inter- > face changes its address. The ruleset does not need to be reload- > ed. This is especially useful with nat. Ah, good point! I'll try this on the next maintenance window! Thanks for the valuable hint. Are you sure it also works for interfaces that don't exist yet? It's not a question of tun0 changing addresses (static IP in this particular case), but of tun0 not existing before ppp has a chance to start at all? -cpghost. -- Cordula's Web. http://www.cordula.ws/