Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Nov 2004 21:54:14 +0100
From:      Hexren <me@hexren.net>
To:        lreid@a.cs.okstate.edu
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ipfw/dhclient conundrum
Message-ID:  <19519311879.20041102215414@hexren.net>
In-Reply-To: <20041102184616.880BDA0686@csa.cs.okstate.edu>
References:  <20041102184616.880BDA0686@csa.cs.okstate.edu>

next in thread | previous in thread | raw e-mail | index | archive | help

lacoe> I have a circular conundrum involving the sequence of boot events that
lacoe> I'm trying to solve, and I'd like to know if any other users have
lacoe> found a solution to this, or what some suggestions may be.

>I have is this: /etc/rc.d/ipfw needs to be run after
>/etc/rc.d/dhclient. This is due to the fact that I do not have a static
>IP lease, and my firewall script determines the external interface's ip
>address with ifconfig. However, if /etc/rc.d/dhclient runs before
>/etc/rc.d/ipfw, with the firewall at default-to-deny and no rules added
>to pass dhcp autoconfigure traffic, dhclient cannot acquire a lease. But
>to run the firewall script, dhclient needs to have acquired a lease so
>the rules make sense. But to run dhclient, ipfw needs to have run... et
>cetera ad nauseum.

---------------------------------------------

Maybe I am not seeing something obvious then please say so, but coud
you tell me for what exacty you need an aquired lease before running
the ipfw script ?
You've thought about making your firewalls rules with something like: "add allow ip from
any to any [attention]via interface[endattention]"

Greetz Hexren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19519311879.20041102215414>