From owner-freebsd-stable@FreeBSD.ORG Sun Jan 28 12:32:39 2007 Return-Path: X-Original-To: freebsd-stable@FreeBSD.ORG Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 6A70316A404 for ; Sun, 28 Jan 2007 12:32:39 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from out4.smtp.messagingengine.com (out4.smtp.messagingengine.com [66.111.4.28]) by mx1.freebsd.org (Postfix) with ESMTP id 4196113C481 for ; Sun, 28 Jan 2007 12:32:39 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from out1.internal (unknown [10.202.2.149]) by out1.messagingengine.com (Postfix) with ESMTP id B67F5996F1; Sun, 28 Jan 2007 07:32:38 -0500 (EST) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by out1.internal (MEProxy); Sun, 28 Jan 2007 07:32:38 -0500 X-Sasl-enc: MgXdfVWPLXUOYC55tMs+fKcWvZk0oekpLn9gWruasQqd 1169987558 Received: from [192.168.123.18] (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTP id 10900179CA; Sun, 28 Jan 2007 07:32:36 -0500 (EST) Message-ID: <45BC97E2.4050603@FreeBSD.org> Date: Sun, 28 Jan 2007 12:32:34 +0000 From: "Bruce M. Simpson" User-Agent: Thunderbird 1.5.0.9 (X11/20070125) MIME-Version: 1.0 To: Pete French References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-stable@FreeBSD.ORG Subject: Re: impossible rc.d ordering problem with stf and pf ? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jan 2007 12:32:39 -0000 Pete French wrote: > Am trying to solve a little problem with 'pf'. I have a ruleset which > has some firewall rules for the IPv6 interface stf0. This works fine, > except when I rreboot the machine, as the pf script is run before the > network_ipv6 script - so stf0 does not exist. but I cannot work out > how to arrange for stf0 to be created before the pf script is run - as > network_ipv6 requires 'routing', but the pf script says it must be run > before 'routing', if I am reading the 'REQUIRE' and 'BEFORE' lines > correctly. > Just chiming in to confirm that this problem definitely exists. I don't have a solution, however, my IPv6 tunnels at home have all expired, so I may well get spare cycles to look at this the same time that I get spare cycles to revive the tunnels. BMS