conf/128005: /etc/rc.d/pf should REQUIRE ppp

Josh Carroll josh.carroll at gmail.com
Fri Oct 10 16:40:02 UTC 2008


>Number:         128005
>Category:       conf
>Synopsis:       /etc/rc.d/pf should REQUIRE ppp
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Oct 10 16:40:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Josh Carroll
>Release:        7.1-PRERELEASE/amd64
>Organization:
N/A
>Environment:
FreeBSD pflog.net 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #1: Fri Oct  3 20:58:17 EDT 2008     root at pflog.net:/usr/obj/usr/src/sys/PFLOG  amd64
>Description:
I have not personally experienced this problem, but I am submitting on behalf of the person who experienced the problem.

This user is using diald/ppp to establish a PPPoE connection, which is brought up on tun0.

/etc/rc.d/pf happens before /etc/rc.d/ppp according to rcorder, so tun0 does not yet have an IP address and pf fails to load the ruleset.

This is already done for ipfw, so I guess it makes sense to do it also for pf:

% rcorder /etc/rc.d/* | grep -E '(netif|ppp|pf)'
/etc/rc.d/ipfilter
/etc/rc.d/ipfs
/etc/rc.d/sppp
/etc/rc.d/netif
/etc/rc.d/pfsync
/etc/rc.d/pflog
/etc/rc.d/pf
/etc/rc.d/ppp
/etc/rc.d/ipfw
/etc/rc.d/pppoed
/etc/rc.d/rfcomm_pppd_server

Putting ppp as a REQUIRE for pf fixed this person's particular problem. I'm just not aware if there was a reason for not having this in place, historically speaking.

Thanks!
Josh


>How-To-Repeat:
Setup ppp/diald for tun0 and have a pf.conf referencing the tun0 interface.
>Fix:
--- pf.old      2008-10-10 12:37:47.000000000 -0400
+++ pf  2008-10-10 12:37:52.000000000 -0400
@@ -4,7 +4,7 @@
 #

 # PROVIDE: pf
-# REQUIRE: FILESYSTEMS netif pflog pfsync
+# REQUIRE: FILESYSTEMS netif pflog pfsync ppp
 # BEFORE:  routing
 # KEYWORD: nojail


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list