[Bug 211928] [pf] /etc/rc.d/pf should REQUIRE routing

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed Aug 17 09:10:28 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211928

            Bug ID: 211928
           Summary: [pf] /etc/rc.d/pf should REQUIRE routing
           Product: Base System
           Version: 10.3-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: conf
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: rs at bytecamp.net

Created attachment 173767
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=173767&action=edit
/etc/rc.d/pf: move routing to REQUIRE

When a system with pf_enable="YES" in /etc/rc.conf uses hostnames in
/etc/pf.conf, these hostnames cannot be resolved via external nameservers
because the default route is not yet set. This results in an empty (all open)
ruleset.

Fix: move routing from BEFORE to REQUIRE.

Since r195026 already put netif back to REQUIRE, this change does not affect
the issue that the firewall should rather have been setup _before_ any network
traffic can occur.

with kind regards,
Robert Schulze

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list