From owner-freebsd-security  Sun Dec 31 19:40:45 2000
From owner-freebsd-security@FreeBSD.ORG  Sun Dec 31 19:40:43 2000
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from web1003.mail.yahoo.com (web1003.mail.yahoo.com [128.11.23.93])
	by hub.freebsd.org (Postfix) with SMTP id 03A7A37B400
	for <freebsd-security@freebsd.org>; Sun, 31 Dec 2000 19:40:43 -0800 (PST)
Received: (qmail 8686 invoked by uid 60001); 1 Jan 2001 03:40:42 -0000
Message-ID: <20010101034042.8685.qmail@web1003.mail.yahoo.com>
Received: from [205.252.144.26] by web1003.mail.yahoo.com; Sun, 31 Dec 2000 19:40:42 PST
Date: Sun, 31 Dec 2000 19:40:42 -0800 (PST)
From: echelon <e_chelon@yahoo.com>
Subject: Re: IPFilter and new rc.conf scripts
To: Tom Czarnik <tom@athms.com>, Wes Peters <wes@softweyr.com>
Cc: FreeBSD Security <freebsd-security@freebsd.org>,
	IPFilter <ipfilter@coombs.anu.edu.au>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Happy New Year!

Thanks for your information.

PR conf/22859 explains why ipf can't work on tun0
after reboot. So the ad-hoc solution is to put "ipf
-y" in /etc/ppp/ppp.linkup.

Thanks again.

-echelon





--- Tom Czarnik <tom@athms.com> wrote:
> Wes Peters wrote:
> > 
> > Tom Czarnik wrote:
> > >
> > > With 4.2R, when IPF is first loaded, the tun0
> interface
> > > is not present.
> > 
> > You can take care of this little bobble with ipf
> -y in your ppp "linkup"
> > script.
> 
> There is an open PR#22859 that talks about the
> ppp/tun0 problem. The
> fix of loading IPFilter after ppp in the rc.network
> (like IPFW is done)
> will correct the problems with both tun0 and
modules.


__________________________________________________
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message