ipfilter and DHCP

J.D. Bronson jbronson-freebsd at sixcompanies.com
Tue Apr 10 13:34:04 UTC 2007


Ok...what do you guys do to handle a change of IP/network via DHCP 
with ipfilter?

I have been told that if my IP changes while the machine is up and 
running that ipfilter WON'T see this change and needs to be 
told...supposedly it only reads the IP when it starts itself.

If this is true, is there any easy way to fix this?
I run ipcheck.py and that can invoke a script if needed if it notices 
and IP changed....

ipnat.conf:
map bge1 192.43.82.0/24 -> 0/32 proxy port ftp ftp/tcp
map bge1 192.43.82.0/24 -> 0/32 portmap tcp/udp auto
map bge1 192.43.82.0/24 -> 0/32

rdr bge1 0.0.0.0/0 port 25 -> 192.43.82.170 port 25


I presume if it reads the IP and fills in the '0/32' + '0.0.0.0/0' 
values at startup...having my IP change could be disasterous.

thanks for any tips-

-JD



More information about the freebsd-questions mailing list