From owner-freebsd-current@FreeBSD.ORG Thu Jun 25 12:58:36 2009 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 46C5C106564A for ; Thu, 25 Jun 2009 12:58:36 +0000 (UTC) (envelope-from ianf@clue.co.za) Received: from inbound01.jnb1.gp-online.net (inbound01.jnb1.gp-online.net [41.161.16.135]) by mx1.freebsd.org (Postfix) with ESMTP id CF6BD8FC20 for ; Thu, 25 Jun 2009 12:58:35 +0000 (UTC) (envelope-from ianf@clue.co.za) Received: from [41.145.103.163] (helo=clue.co.za) by inbound01.jnb1.gp-online.net with esmtpsa (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.63) (envelope-from ) id 1MJoXA-0004ay-EO for current@freebsd.org; Thu, 25 Jun 2009 14:58:32 +0200 Received: from localhost ([127.0.0.1] helo=clue.co.za) by clue.co.za with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1MJoX9-000F3V-6z for current@freebsd.org; Thu, 25 Jun 2009 14:58:31 +0200 To: current@freebsd.org From: "Ian Freislich" X-Attribution: BOFH Date: Thu, 25 Jun 2009 14:58:31 +0200 Message-Id: Cc: Subject: pfsync rc script breaks pfsync on cloned interfaces X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Jun 2009 12:58:36 -0000 Hi This change has broken pfsync start for me: --- rc.d/pfsync 10 Apr 2007 16:42:13 -0000 1.5 +++ rc.d/pfsync 1 Jun 2009 05:35:03 -0000 1.6 @@ -1,10 +1,10 @@ #!/bin/sh # -# $FreeBSD: src/etc/rc.d/pfsync,v 1.5 2007/04/10 16:42:13 keramida Exp $ +# $FreeBSD: src/etc/rc.d/pfsync,v 1.6 2009/06/01 05:35:03 dougb Exp $ # # PROVIDE: pfsync -# REQUIRE: FILESYSTEMS netif +# REQUIRE: FILESYSTEMS # KEYWORD: nojail The issue is that the syncdev is a cloned interface: pfsync_enable="YES" pfsync_syncdev="vlan5" pfsync_syncpeer="41.154.0.2" And now pfsync starts before the vlan interface starts, which means that in practice, it doesn't start. I can see the argument that pfsync is a "network interface", but really, it does need netif for my case unless there is some other way to do this. Ian -- Ian Freislich