From owner-freebsd-pf@FreeBSD.ORG Wed Jul 9 23:25:39 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B9C371065670 for ; Wed, 9 Jul 2008 23:25:39 +0000 (UTC) (envelope-from ddesimone@verio.net) Received: from relay1-bcrtfl2.verio.net (relay1-bcrtfl2.verio.net [131.103.218.142]) by mx1.freebsd.org (Postfix) with ESMTP id 5EB468FC15 for ; Wed, 9 Jul 2008 23:25:39 +0000 (UTC) (envelope-from ddesimone@verio.net) Received: from iad-wprd-xchw01.corp.verio.net (iad-wprd-xchw01.corp.verio.net [198.87.7.164]) by relay1-bcrtfl2.verio.net (Postfix) with ESMTP id 4EAA7B038094 for ; Wed, 9 Jul 2008 18:54:25 -0400 (EDT) thread-index: AcjiFrvl8SCtCzbfQ4yCXR8fdgpO+w== Received: from limbo.int.dllstx01.us.it.verio.net ([10.10.10.11]) by iad-wprd-xchw01.corp.verio.net with Microsoft SMTPSVC(6.0.3790.1830); Wed, 9 Jul 2008 18:54:24 -0400 Received: by limbo.int.dllstx01.us.it.verio.net (Postfix, from userid 1000) id 771CC8E29B; Wed, 9 Jul 2008 17:54:24 -0500 (CDT) Date: Wed, 9 Jul 2008 17:54:24 -0500 From: "David DeSimone" Content-Transfer-Encoding: 7bit To: Message-ID: <20080709225423.GB1011@verio.net> Mail-Followup-To: freebsd-pf@freebsd.org Content-Class: urn:content-classes:message Importance: normal Priority: normal References: <48750381.1030004@eskk.nu> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992 MIME-Version: 1.0 Content-Type: text/plain; x-action=pgp-signed; charset="us-ascii" Content-Disposition: inline In-Reply-To: <48750381.1030004@eskk.nu> Precedence: bulk User-Agent: Mutt/1.5.9i X-OriginalArrivalTime: 09 Jul 2008 22:54:24.0884 (UTC) FILETIME=[BBD9F340:01C8E216] Subject: Re: New pf install on Freebsd7 seem to be a slow starter. X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jul 2008 23:25:39 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Leslie Jensen wrote: > > # tables > table { something.somewhere.com, somethingelse.somewhere.com, > xxx.yyy.zzz.qqq } This looks like the problem. You have put hostnames in your pf.conf. While this is supported, hostname lookups at boot time are problematic because the network is just getting started. Nameservers are not always immediately reachable, so these name lookups will stall out. I recommend you put IP addresses in your pf.conf so that it can be loaded without waiting for a nameserver. Alternatively, put these hostnames (and IP's) in your /etc/hosts file. - -- David DeSimone == Network Admin == fox@verio.net "This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, dis- tribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you." --Lawyer Bot 6000 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFIdUGfFSrKRjX5eCoRAjZBAKCVjmLXTht41z8OVtUIAdjxEbhmyACgpSkr kpKtjfEnBwMxdDhe30pVxpI= =hFXu -----END PGP SIGNATURE----- This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you.