conf/128005: /etc/rc.d/pf should REQUIRE ppp

Josh Carroll josh.carroll at
Fri Oct 10 16:40:02 UTC 2008

>Number:         128005
>Category:       conf
>Synopsis:       /etc/rc.d/pf should REQUIRE ppp
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Oct 10 16:40:01 UTC 2008
>Originator:     Josh Carroll
>Release:        7.1-PRERELEASE/amd64
FreeBSD 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #1: Fri Oct  3 20:58:17 EDT 2008     root at  amd64
I have not personally experienced this problem, but I am submitting on behalf of the person who experienced the problem.

This user is using diald/ppp to establish a PPPoE connection, which is brought up on tun0.

/etc/rc.d/pf happens before /etc/rc.d/ppp according to rcorder, so tun0 does not yet have an IP address and pf fails to load the ruleset.

This is already done for ipfw, so I guess it makes sense to do it also for pf:

% rcorder /etc/rc.d/* | grep -E '(netif|ppp|pf)'

Putting ppp as a REQUIRE for pf fixed this person's particular problem. I'm just not aware if there was a reason for not having this in place, historically speaking.


Setup ppp/diald for tun0 and have a pf.conf referencing the tun0 interface.
--- pf.old      2008-10-10 12:37:47.000000000 -0400
+++ pf  2008-10-10 12:37:52.000000000 -0400
@@ -4,7 +4,7 @@

 # PROVIDE: pf
-# REQUIRE: FILESYSTEMS netif pflog pfsync
+# REQUIRE: FILESYSTEMS netif pflog pfsync ppp
 # BEFORE:  routing
 # KEYWORD: nojail


More information about the freebsd-bugs mailing list