From owner-freebsd-stable Mon Jul 9 6:12:43 2001 Delivered-To: freebsd-stable@freebsd.org Received: from shiva.jussieu.fr (shiva.jussieu.fr [134.157.0.129]) by hub.freebsd.org (Postfix) with ESMTP id A996837B406 for ; Mon, 9 Jul 2001 06:12:39 -0700 (PDT) (envelope-from talon@lpthe.jussieu.fr) Received: from parthe.lpthe.jussieu.fr (parthe.lpthe.jussieu.fr [134.157.10.1]) by shiva.jussieu.fr (8.11.3/jtpda-5.3.3) with ESMTP id f69DCcD38460 for ; Mon, 9 Jul 2001 15:12:38 +0200 (CEST) Received: from asmodee.lpthe.jussieu.fr (asmodee.lpthe.jussieu.fr [134.157.10.34]) by parthe.lpthe.jussieu.fr (8.11.1/jtpda-5.3.1) with ESMTP id f69DCbq20899 for ; Mon, 9 Jul 2001 15:12:37 +0200 (MEST) Received: (from talon@localhost) by asmodee.lpthe.jussieu.fr (8.11.3/8.11.1) id f69DD4Y00882 for freebsd-stable@FreeBSD.ORG; Mon, 9 Jul 2001 15:13:04 +0200 (CEST) (envelope-from talon) Date: Mon, 9 Jul 2001 15:13:04 +0200 From: Michel TALON To: freebsd-stable@FreeBSD.ORG Subject: ipf and tun Message-ID: <20010709151304.A560@lpthe.jussieu.fr> Mail-Followup-To: Michel TALON , freebsd-stable@FreeBSD.ORG Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello, I have a little problem which has already caused trouble to me. When my machine boots it runs ipf -f /etc/ipf.rules These rules allow packets coming from tun0 to get state (my home machine is at the other end of the line). However ppp has still not been fired, so the next time i connect with ppp i can get at the machine but not from here surf the web. Running ipf -Fa -f/etc/ipf.rules fixes the problem, but is highly unpractical. So it seems that ipf applies rules only for the configured interfaces. Do you think that putting ! ipf -y in /etc/ppp/ppp.linkup would solve the problem? Of course i can try but risk been locked out! -- Michel TALON To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message