From owner-freebsd-security Mon Jan 1 12:16:44 2001 From owner-freebsd-security@FreeBSD.ORG Mon Jan 1 12:16:42 2001 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mail.gmx.net (pop.gmx.net [194.221.183.20]) by hub.freebsd.org (Postfix) with SMTP id 87C3337B400 for ; Mon, 1 Jan 2001 12:16:41 -0800 (PST) Received: (qmail 29889 invoked by uid 0); 1 Jan 2001 20:16:37 -0000 Received: from p3ee2163a.dip.t-dialin.net (HELO speedy.gsinet) (62.226.22.58) by mail.gmx.net (mail01) with SMTP; 1 Jan 2001 20:16:37 -0000 Received: (from sittig@localhost) by speedy.gsinet (8.8.8/8.8.8) id PAA11435 for freebsd-security@freebsd.org; Mon, 1 Jan 2001 15:25:10 +0100 Date: Mon, 1 Jan 2001 15:25:10 +0100 From: Gerhard Sittig To: FreeBSD Security Subject: Re: IPFilter and new rc.conf scripts Message-ID: <20010101152510.R253@speedy.gsinet> Mail-Followup-To: FreeBSD Security References: <20010101034042.8685.qmail@web1003.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <20010101034042.8685.qmail@web1003.mail.yahoo.com>; from e_chelon@yahoo.com on Sun, Dec 31, 2000 at 07:40:42PM -0800 Organization: System Defenestrators Inc. Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, Dec 31, 2000 at 19:40 -0800, echelon wrote: > > PR conf/22859 explains why ipf can't work on tun0 > after reboot. So the ad-hoc solution is to put "ipf > -y" in /etc/ppp/ppp.linkup. "ipf -y" is what you need in ppp.linkup -- as well as in ppp.linkdown -- anyway as soon as you have dynamic IP addresses on your tun* interfaces. So I wouldn't call this just "ad hoc" but more "given almost by default and necessity". :) This will make the 0.0.0.0/32 address in your rules work very much like MYADDR in ppp(8) syntax does. virtually yours 82D1 9B9C 01DC 4FB4 D7B4 61BE 3F49 4F77 72DE DA76 Gerhard Sittig true | mail -s "get gpg key" Gerhard.Sittig@gmx.net -- If you don't understand or are scared by any of the above ask your parents or an adult to help you. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message