From owner-freebsd-pf@FreeBSD.ORG  Tue Jan 18 15:54:41 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D254316A4CE
	for <freebsd-pf@freebsd.org>; Tue, 18 Jan 2005 15:54:41 +0000 (GMT)
Received: from mallaury.noc.nerim.net (smtp-102-tuesday.noc.nerim.net
	[62.4.17.102])	by mx1.FreeBSD.org (Postfix) with ESMTP id 8766843D41
	for <freebsd-pf@freebsd.org>; Tue, 18 Jan 2005 15:54:41 +0000 (GMT)
	(envelope-from e-masson@kisoft-services.com)
Received: from srvbsdnanssv.interne.kisoft-services.com (kisoft.net1.nerim.net
	[62.212.107.51])	by mallaury.noc.nerim.net (Postfix) with ESMTP
	id 7275462D7D; Tue, 18 Jan 2005 16:54:38 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])3D456C2C2;
	Tue, 18 Jan 2005 16:54:38 +0100 (CET)
Received: from srvbsdnanssv.interne.kisoft-services.com ([127.0.0.1])
	(amavisd-new, port 10024)
	with ESMTP id 00875-07; Tue, 18 Jan 2005 16:54:33 +0100 (CET)
Received: by srvbsdnanssv.interne.kisoft-services.com (Postfix, from userid
	1001)	id 1CC32C237; Tue, 18 Jan 2005 16:54:33 +0100 (CET)
To: Max Laier <max@love2party.net>
From: Eric Masson <e-masson@kisoft-services.com>
In-Reply-To: <86pt026au8.fsf@srvbsdnanssv.interne.kisoft-services.com> (Eric
 Masson's message of "Tue, 18 Jan 2005 16:00:47 +0100")
References: <86k6qcynus.fsf@srvbsdnanssv.interne.kisoft-services.com>
	<86r7kj3x2b.fsf@srvbsdnanssv.interne.kisoft-services.com>
	<86ekgi9avj.fsf@srvbsdnanssv.interne.kisoft-services.com>
	<200501181350.21488.max@love2party.net>
	<86pt026au8.fsf@srvbsdnanssv.interne.kisoft-services.com>
X-Operating-System: FreeBSD 5.3-STABLE i386
Date: Tue, 18 Jan 2005 16:54:32 +0100
Message-ID: <86brbmu407.fsf@srvbsdnanssv.interne.kisoft-services.com>
User-Agent: Gnus/5.1006 (Gnus v5.10.6) XEmacs/21.4 (Security Through
 Obscurity, berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: amavisd-new at interne.kisoft-services.com
cc: freebsd-pf@freebsd.org
Subject: Re: pf & clonable devices
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical discussion and general questions about packet filter (pf)
	<freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jan 2005 15:54:42 -0000

>>>>> "Eric" == Eric Masson <e-masson@kisoft-services.com> writes:

Followup to myself once more.

 Eric> The next question concerns PF support for clonable interfaces
 Eric> that do not exist at pf startup. Is this a feature that could be
 Eric> added or do I need to mess with anchors in ip-up/ip-down scripts
 Eric> ?

Ok, seems there's no absolute need to mess with anchors as the faulty
startup rule is the following :
set loginterface $ext_if

If this line is removed from pf.conf, startup initialization works fine.
I can live with missing statistics :/

Thanks for your help.

If you need help testing patches in this area...

Regards

Éric

-- 
 je vous rappelle qu'il est fréquenté par une moyenne d'âge plus faible
 que la moyenne. C'est facile de mettre des lois abscons, qui n'évoluent
 pas à la vitesse du net, et de dire "eh ben vous n'aviez qu'à lire"
 -+- DP in : <http://www.le-gnu.net> - Si ya plus moyen de moyenner -+-