From owner-freebsd-bugs@FreeBSD.ORG Mon Aug 11 09:18:34 2008 Return-Path: Delivered-To: freebsd-bugs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 973CC106564A; Mon, 11 Aug 2008 09:18:34 +0000 (UTC) (envelope-from axel@axel.truedestiny.net) Received: from mail1-new.vianetworks.nl (mail1-new.vianetworks.nl [212.61.9.28]) by mx1.freebsd.org (Postfix) with ESMTP id 524D38FC08; Mon, 11 Aug 2008 09:18:34 +0000 (UTC) (envelope-from axel@axel.truedestiny.net) Received: from wolverine.thuis.net (firebox.nl.clara.net [212.61.20.1]) by mail1-new.vianetworks.nl (Postfix) with ESMTP id 77240DAFCDD; Mon, 11 Aug 2008 10:57:14 +0200 (CEST) Message-ID: <489FFEE9.4030405@axel.truedestiny.net> Date: Mon, 11 Aug 2008 10:57:13 +0200 From: Axel Scheepers User-Agent: Thunderbird 2.0.0.16 (X11/20080728) MIME-Version: 1.0 To: gavin@FreeBSD.org References: <200808072017.m77KHIQ6033876@freefall.freebsd.org> In-Reply-To: <200808072017.m77KHIQ6033876@freefall.freebsd.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-bugs@FreeBSD.org Subject: Re: conf/126348: PF ruleset doesn't load when it needs to resolve things X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Aug 2008 09:18:34 -0000 gavin@FreeBSD.org wrote: > To submitter: Does adding an entry in /etc/hosts for the fqdn > work as expected? > > With firewalls, there is always a problem as to what order things > should be brought up. Idealy the firewall should be up before > any interfaces have been assigned IP addresses, otherwise there > is a window where the machine is on the network but is unprotected. > Obviously, however, this means the machine cannot resolve hostnames > during boot unless they are in /etc/hosts. > Hello, I've just added the entry to /etc/hosts and can confirm it works. Kind regards, Axel Scheepers