From owner-freebsd-hackers Fri May 7 2:18:29 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from awfulhak.org (awfulhak.force9.co.uk [195.166.136.63]) by hub.freebsd.org (Postfix) with ESMTP id 8775314A14; Fri, 7 May 1999 02:17:48 -0700 (PDT) (envelope-from brian@lan.awfulhak.org) Received: from keep.lan.Awfulhak.org (brian@keep.lan.Awfulhak.org [172.16.0.8]) by awfulhak.org (8.9.2/8.9.2) with ESMTP id KAA32998; Fri, 7 May 1999 10:17:46 +0100 (BST) (envelope-from brian@lan.awfulhak.org) Received: from keep.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by keep.lan.Awfulhak.org (8.9.3/8.9.3) with ESMTP id IAA10146; Fri, 7 May 1999 08:32:26 +0100 (BST) (envelope-from brian@keep.lan.Awfulhak.org) Message-Id: <199905070732.IAA10146@keep.lan.Awfulhak.org> X-Mailer: exmh version 2.0.2 2/24/98 To: Danil Shebunin Cc: freebsd-questions@FreeBSD.org, freebsd-hackers@FreeBSD.org Subject: Re: Kernel PPP (PPPD): ip-up & ip-down scripts execution In-reply-to: Your message of "Fri, 07 May 1999 00:28:06 +0400." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 07 May 1999 08:32:16 +0100 From: Brian Somers Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Your best bet is to run pppd as root. Alternatively, use user-ppp and the ``set filter'' command. > Hi! > > We have a small net and using FreeBSD 2.2.8 machine as Internet gate. > To dial a provider we use kernel PPP - PPPD. > I need to setup a firewall after connection established. For this purpose > I use file /etc/ppp/ip-up, as described in man page, to setup firewall > using ipfw. But it seems, that this script is called with effective uid of > current user, not root ,as described in man! I decide that, because the > script is executed (I've placed simple 'echo executed > /exec.txt' in this > script to check this). But all ipfw commands is not executed - firewall > settings remain unchanged. > > What I'm doing wrong? How can I force ip-up and ip-down scripts to execute > correctly? > > P.S. PLEASE! PLEASE! PLEASE! > Reply to my e-mail - I'm not subscribed to these mail-lists > > -- > ===---===---===---===---===---=== > Have a nice CONNECT! > Dan (daktaklakpak@public.mtu.ru) > ===---===---===---===---===---=== -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message