conf/128005: /etc/rc.d/pf should REQUIRE ppp
josh.carroll at gmail.com
Fri Oct 10 16:40:02 UTC 2008
>Synopsis: /etc/rc.d/pf should REQUIRE ppp
>Arrival-Date: Fri Oct 10 16:40:01 UTC 2008
>Originator: Josh Carroll
FreeBSD pflog.net 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #1: Fri Oct 3 20:58:17 EDT 2008 root at pflog.net:/usr/obj/usr/src/sys/PFLOG amd64
I have not personally experienced this problem, but I am submitting on behalf of the person who experienced the problem.
This user is using diald/ppp to establish a PPPoE connection, which is brought up on tun0.
/etc/rc.d/pf happens before /etc/rc.d/ppp according to rcorder, so tun0 does not yet have an IP address and pf fails to load the ruleset.
This is already done for ipfw, so I guess it makes sense to do it also for pf:
% rcorder /etc/rc.d/* | grep -E '(netif|ppp|pf)'
Putting ppp as a REQUIRE for pf fixed this person's particular problem. I'm just not aware if there was a reason for not having this in place, historically speaking.
Setup ppp/diald for tun0 and have a pf.conf referencing the tun0 interface.
--- pf.old 2008-10-10 12:37:47.000000000 -0400
+++ pf 2008-10-10 12:37:52.000000000 -0400
@@ -4,7 +4,7 @@
# PROVIDE: pf
-# REQUIRE: FILESYSTEMS netif pflog pfsync
+# REQUIRE: FILESYSTEMS netif pflog pfsync ppp
# BEFORE: routing
# KEYWORD: nojail
More information about the freebsd-bugs