From owner-freebsd-stable@FreeBSD.ORG Wed Oct 15 02:38:14 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 932B4106568C for ; Wed, 15 Oct 2008 02:38:14 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [64.7.153.18]) by mx1.freebsd.org (Postfix) with ESMTP id 5AD4C8FC0C for ; Wed, 15 Oct 2008 02:38:14 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smarthost1.sentex.ca (8.14.3/8.14.3) with ESMTP id m9F2cB3U012384; Tue, 14 Oct 2008 22:38:11 -0400 (EDT) (envelope-from mike@sentex.net) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.13.8/8.13.3) with ESMTP id m9F2cAWu007721 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 14 Oct 2008 22:38:11 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <200810150238.m9F2cAWu007721@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Tue, 14 Oct 2008 22:38:02 -0400 To: "Daniel O'Connor" From: Mike Tancsa In-Reply-To: <200810151059.58440.doconnor@gsoft.com.au> References: <200810092206.02362.doconnor@gsoft.com.au> <200810100036.m9A0aMCi078828@lava.sentex.ca> <200810101125.21261.doconnor@gsoft.com.au> <200810151059.58440.doconnor@gsoft.com.au> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Scanned-By: MIMEDefang 2.64 on 64.7.153.18 Cc: freebsd-stable@freebsd.org Subject: Re: Userland PPP not deleting old IP on disconnect X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Oct 2008 02:38:14 -0000 At 08:29 PM 10/14/2008, Daniel O'Connor wrote: >On Friday 10 October 2008 11:25:19 Daniel O'Connor wrote: > > > Default: Enabled if -nat is specified. This option > > > simply tells ppp to add new interface addresses to the interface > > > rather than replacing them. The option can only be enabled if > > > network address translation is enabled (``nat enable yes''). > > > > I've added that and nat enable no (even though it was not enabled) and > > I'll see how I go. > >Now it doesn't appear on tun0 but I still get pf adding states for the old >IP(!). > >Obviously this breaks connectivity for NAT machines :) > >I am going to update to RELENG_7 RSN and I will see if that helps. It is very >odd it only just started doing it though.. do you have tun0 in () on your nat statement ? eg. nat on tun0 from 192.168.23.0/24 to any -> (tun0) You could always add to ppp.linkup something like pppoe: ! /sbin/pfctl -Fnat -f /etc/pf.conf ---Mike