From owner-freebsd-questions@FreeBSD.ORG Wed Feb 14 02:59:28 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2723316A406 for ; Wed, 14 Feb 2007 02:59:28 +0000 (UTC) (envelope-from fbsd06@mlists.homeunix.com) Received: from mxout-03.mxes.net (mxout-03.mxes.net [216.86.168.178]) by mx1.freebsd.org (Postfix) with ESMTP id 0432813C494 for ; Wed, 14 Feb 2007 02:59:27 +0000 (UTC) (envelope-from fbsd06@mlists.homeunix.com) Received: from gumby.homeunix.com (unknown [87.81.140.128]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTP id 5619A51934 for ; Tue, 13 Feb 2007 21:59:24 -0500 (EST) Date: Wed, 14 Feb 2007 02:59:18 +0000 From: RW To: freebsd-questions@freebsd.org Message-ID: <20070214025918.38c60c88@gumby.homeunix.com> In-Reply-To: <20070214021450.GC52462@epia-2.farid-hajji.net> References: <20070214021450.GC52462@epia-2.farid-hajji.net> X-Mailer: Claws Mail 2.7.2 (GTK+ 2.10.9; i386-portbld-freebsd6.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: pf/ppp timing problem at startup X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Feb 2007 02:59:28 -0000 On Wed, 14 Feb 2007 03:14:50 +0100 cpghost wrote: > I'm using ADSL to connect (using a static IP), and ppp(1) > needs some time (a few seconds) to initialize and configure > the tun(4) device. Parallel to this, pf(4) starts immediately, > and doesn't recognize ext_if (tun0), which is not yet ready. > As a result of this, pf shuts down again and there's no firewall. > >... > Perhaps there's also some pf setting that would dynamically adjust > to tun0 once it appears? > I don't know the answer, but I suspect that you are asking the wrong question. Your setup is a very common one, so it seems a bit unlikely any special bodging is required (and that no-one is complaining about it). The ppp startup script is supposed to resync pf after starting ppp. I'm wondering if there is anything unusual in you ppp.conf or rc.conf entries.