Date: Tue, 17 Jan 2006 13:14:56 +0200 From: stephen <dinzdale@gmail.com> To: "derth@wbs.co.za" <derth@wbs.co.za> Cc: freebsd-pf@freebsd.org Subject: Re: PF + PPPoE Message-ID: <ee918c780601170314q7693c555x1cf01201b0d9f157@mail.gmail.com> In-Reply-To: <55e8a96c0601162221w24026424j6c2eeec684db8bb1@mail.gmail.com> References: <18525.196.2.148.70.1137476403.squirrel@webmail.wbs.co.za> <55e8a96c0601162221w24026424j6c2eeec684db8bb1@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
what rudi means to say is, in his rc.conf he has stuck instructions for his ppp to start on boot, and for pf to load on boot. problem is freebsd creates tun0 when ppp runs for the first time, not when the machine boots up, and as his pf.conf refers to tun0, pf won't start if it runs before ppp has started as there is no tun0 device and pf bombs out saying 'no such device'. (i know cause i had similar issue ;-) what i did was make a start script in /usr/local/etc/rc.d/ that runs ppp, sleeps for 30 seconds (should be more than enough - i use telkom's adsl which takes about 10 seconds, and i think my mate's iburst connects in less than 30 seconds) and -then- runs pf -f /etc/pf.conf that should do the trick stephen On 1/16/06, derth@wbs.co.za <derth@wbs.co.za> wrote: > Good day, > > I am using freebsd 6.0 with PF and running a ADSL PPPoE internet connecti= on. > > My PF ruleset uses tun0 for the external interface but sometimes the ppp > dialler does not start in time and the PF rules fail to load. Then after > a few seconds the PPPoE connection get's established and I have no > firewall. > > Does anyone know of a way around this problem? > > Without the ruleset it's going to be kind of difficult to help. This > does work, which means there's something wrong with your rules. > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ee918c780601170314q7693c555x1cf01201b0d9f157>