From owner-freebsd-mobile@FreeBSD.ORG  Tue Jan 31 20:54:54 2006
Return-Path: <owner-freebsd-mobile@FreeBSD.ORG>
X-Original-To: freebsd-mobile@freebsd.org
Delivered-To: freebsd-mobile@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9696016A420
	for <freebsd-mobile@freebsd.org>; Tue, 31 Jan 2006 20:54:54 +0000 (GMT)
	(envelope-from david@catwhisker.org)
Received: from bunrab.catwhisker.org
	(adsl-63-193-123-122.dsl.snfc21.pacbell.net [63.193.123.122])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2426543D45
	for <freebsd-mobile@freebsd.org>; Tue, 31 Jan 2006 20:54:54 +0000 (GMT)
	(envelope-from david@catwhisker.org)
Received: from bunrab.catwhisker.org (localhost [127.0.0.1])
	by bunrab.catwhisker.org (8.13.3/8.13.3) with ESMTP id k0VKsr0j046561
	for <freebsd-mobile@freebsd.org>; Tue, 31 Jan 2006 12:54:53 -0800 (PST)
	(envelope-from david@bunrab.catwhisker.org)
Received: (from david@localhost)
	by bunrab.catwhisker.org (8.13.3/8.13.1/Submit) id k0VKsrrv046560
	for freebsd-mobile@freebsd.org; Tue, 31 Jan 2006 12:54:53 -0800 (PST)
	(envelope-from david)
Date: Tue, 31 Jan 2006 12:54:53 -0800
From: David Wolfskill <david@catwhisker.org>
To: freebsd-mobile@freebsd.org
Message-ID: <20060131205453.GY94023@bunrab.catwhisker.org>
Mail-Followup-To: David Wolfskill <david@catwhisker.org>,
	freebsd-mobile@freebsd.org
References: <20060131204441.GB1047@binky.0xfce3.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20060131204441.GB1047@binky.0xfce3.net>
User-Agent: Mutt/1.4.2.1i
Subject: Re: (wlan) how to update a pf rules set automaticly
X-BeenThere: freebsd-mobile@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Mobile computing with FreeBSD <freebsd-mobile.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-mobile>, 
	<mailto:freebsd-mobile-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-mobile>
List-Post: <mailto:freebsd-mobile@freebsd.org>
List-Help: <mailto:freebsd-mobile-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-mobile>,
	<mailto:freebsd-mobile-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jan 2006 20:54:54 -0000

On Tue, Jan 31, 2006 at 09:44:41PM +0100, Gordon Bergling wrote:
> ...
> Off cource, I could write a script which updates my pf.conf or restart
> pf with a different config file, but I would like to have some more
> magic. ;)
> 
> Has anyone an Idea?

What I do, using ipfw, is have 2 scripts.

The first is the initial script; it only allows DHCP traffic.

The second is invoked via dhclient-exit-hooks, and is told such things as my
IP address, subnet mask, default router, maybe an NTP server....
Anyway, the second script is fired up by dhclient-exit-hooks, and set up
the packet filtering rules for the IP address & network on which I ended
up.

Peace,
david
-- 
David H. Wolfskill				david@catwhisker.org
Mail filters, like sewers, need to be most restrictive at the point of entry.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.