New pf install on Freebsd7 seem to be a slow starter.

David DeSimone fox at verio.net
Wed Jul 9 23:25:39 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Leslie Jensen <leslie at eskk.nu> wrote:
>
> # tables
> table <goodguys> { something.somewhere.com, somethingelse.somewhere.com,
> xxx.yyy.zzz.qqq }

This looks like the problem.  You have put hostnames in your pf.conf. 
While this is supported, hostname lookups at boot time are problematic
because the network is just getting started.  Nameservers are not always
immediately reachable, so these name lookups will stall out.

I recommend you put IP addresses in your pf.conf so that it can be
loaded without waiting for a nameserver.

Alternatively, put these hostnames (and IP's) in your /etc/hosts file.

- -- 
David DeSimone == Network Admin == fox at verio.net
"This email message is intended for the use of the person to whom
 it has been sent, and may contain information that is confidential
 or legally protected.  If you are not the intended recipient or have
 received this message in error, you are not authorized to copy, dis-
 tribute, or otherwise use this message or its attachments.  Please
 notify the sender immediately by return e-mail and permanently delete
 this message and any attachments.  Verio, Inc. makes no warranty that
 this email is error or virus free.  Thank you."  --Lawyer Bot 6000
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFIdUGfFSrKRjX5eCoRAjZBAKCVjmLXTht41z8OVtUIAdjxEbhmyACgpSkr
kpKtjfEnBwMxdDhe30pVxpI=
=hFXu
-----END PGP SIGNATURE-----


This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free.  Thank you.


More information about the freebsd-pf mailing list