Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 Feb 2011 09:35:50 -0800
From:      Josh Carroll <josh.carroll@gmail.com>
To:        Vincent Hoffman <vince@unsane.co.uk>
Cc:        FreeBSD Stable Mailing List <freebsd-stable@freebsd.org>
Subject:   Re: 8.2-RELEASE pf rules not loading
Message-ID:  <AANLkTin9ZHd%2BABKm6Z_ek9QD1CVKmb9W-bRe2ZRYj1pn@mail.gmail.com>
In-Reply-To: <4D67E2BC.6070202@unsane.co.uk>
References:  <4D67E2BC.6070202@unsane.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
> Hi All,
> =A0 =A0 =A0 =A0 =A0 =A0Just upgraded my home machine to 8.2-RELEASE via
> freebsd-update remotely (spare time at work.) and on reboot my pf
> ruleset isnt being loaded. running '/etc/rc.d/pf start' once its booted
> does start it fine though. Any suggestions on debugging or shall i just
> try a verbose boot and watch the console when I get home?
> I still have
>
> pf_enable=3D"YES" =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0# Set to YES to enab=
le packet filter (pf)
> pflog_enable=3D"YES" =A0 =A0 =A0 =A0 =A0 =A0 =A0 # Set to YES to enable p=
acket filter
> logging
>
> in /etc/rc.conf

Is your interface dynamic (e.g. using DHCP)? If so, you might try changing:

ifconfig_<ifacename>=3D"DHCP"

to

ifconfig_<ifacename>=3D"SYNCDHCP"

It's possible the network hasn't come up properly yet or there is no
IP assigned.

Failing that, you can set:

rc_debug=3D"YES"

in rc.conf then watch at boot time if there are any odd messages when
it attempts to start pf.

Josh



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTin9ZHd%2BABKm6Z_ek9QD1CVKmb9W-bRe2ZRYj1pn>