Date: Thu, 10 Jul 2008 16:01:32 +0300 From: Dennis <hideous@mail.ru> To: Leslie Jensen <leslie@eskk.nu> Cc: freebsd-pf@freebsd.org Subject: Re[2]: New pf install on Freebsd7 seem to be a slow starter. Message-ID: <101002322.20080710160132@mail.ru> In-Reply-To: <4875FF7D.8050304@eskk.nu> References: <48750381.1030004@eskk.nu> <20080709225423.GB1011@verio.net> <4875D33C.2010506@eskk.nu> <3910389261.20080710125542@mail.ru> <4875FD52.1090201@eskk.nu> <4875FF7D.8050304@eskk.nu>
next in thread | previous in thread | raw e-mail | index | archive | help
LJ> Leslie Jensen skrev: >> >> Dennis skrev: >> >>> LJ> Oh, I didn't know that! Can you tell me how to handle this? >>> >>> LJ> The problem is these hosts are not fixed IP's so they use no-ip >>> LJ> (http://www.no-ip.com/) to provide a fixed address. >>> >>> It's possible to populate the table after network initialized and all >>> other cervices are up. Just place empty table >>> >>> table <goodguys> persist >>> >>> in your pf.conf and >>> >>> pfctl -t goodguys -T add \ >>> something.somewhere.com \ >>> somethingelse.somewhere.com \ >>> xxx.yyy.zzz.qqq & >>> >>> into your /etc/rc.local, so pf will start up without delays. >>> >> >> I forgot to mention that I'm on a FreeBSD 7 system so the rc.local thing >> must go somewhere else, do you know where? >> LJ> If I've understood this right this will only be right at the time the LJ> machine starts. How do I get to know if the hosts changes their LJ> addresses. Should I invoke a cron job that does the same as you suggested? LJ> Thanks Yes. Also you would have to clear the table before loading new IP addresses into it. Querying authoritative server with, for example `nslookup`, instead of relying on local resolver would make this thing more robust. Regards, Dennis.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?101002322.20080710160132>