conf/126348: PF ruleset doesn't load when it needs to resolve things

[gavin at FreeBSD.org]

Synopsis: PF ruleset doesn't load when it needs to resolve things

State-Changed-From-To: open->feedback
State-Changed-By: gavin
State-Changed-When: Thu Aug 7 20:09:23 UTC 2008
State-Changed-Why: 
To submitter: Does adding an entry in /etc/hosts for the fqdn
work as expected?

With firewalls, there is always a problem as to what order things
should be brought up.  Idealy the firewall should be up before
any interfaces have been assigned IP addresses, otherwise there
is a window where the machine is on the network but is unprotected.
Obviously, however, this means the machine cannot resolve hostnames
during boot unless they are in /etc/hosts.


Responsible-Changed-From-To: freebsd-bugs->gavin
Responsible-Changed-By: gavin
Responsible-Changed-When: Thu Aug 7 20:09:23 UTC 2008
Responsible-Changed-Why: 
Track

http://www.freebsd.org/cgi/query-pr.cgi?pr=126348