Date: Fri, 10 Oct 2008 16:39:23 GMT From: Josh Carroll <josh.carroll@gmail.com> To: freebsd-gnats-submit@FreeBSD.org Subject: conf/128005: /etc/rc.d/pf should REQUIRE ppp Message-ID: <200810101639.m9AGdN2c086395@www.freebsd.org> Resent-Message-ID: <200810101640.m9AGe1RJ080381@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 128005 >Category: conf >Synopsis: /etc/rc.d/pf should REQUIRE ppp >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Oct 10 16:40:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Josh Carroll >Release: 7.1-PRERELEASE/amd64 >Organization: N/A >Environment: FreeBSD pflog.net 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #1: Fri Oct 3 20:58:17 EDT 2008 root@pflog.net:/usr/obj/usr/src/sys/PFLOG amd64 >Description: I have not personally experienced this problem, but I am submitting on behalf of the person who experienced the problem. This user is using diald/ppp to establish a PPPoE connection, which is brought up on tun0. /etc/rc.d/pf happens before /etc/rc.d/ppp according to rcorder, so tun0 does not yet have an IP address and pf fails to load the ruleset. This is already done for ipfw, so I guess it makes sense to do it also for pf: % rcorder /etc/rc.d/* | grep -E '(netif|ppp|pf)' /etc/rc.d/ipfilter /etc/rc.d/ipfs /etc/rc.d/sppp /etc/rc.d/netif /etc/rc.d/pfsync /etc/rc.d/pflog /etc/rc.d/pf /etc/rc.d/ppp /etc/rc.d/ipfw /etc/rc.d/pppoed /etc/rc.d/rfcomm_pppd_server Putting ppp as a REQUIRE for pf fixed this person's particular problem. I'm just not aware if there was a reason for not having this in place, historically speaking. Thanks! Josh >How-To-Repeat: Setup ppp/diald for tun0 and have a pf.conf referencing the tun0 interface. >Fix: --- pf.old 2008-10-10 12:37:47.000000000 -0400 +++ pf 2008-10-10 12:37:52.000000000 -0400 @@ -4,7 +4,7 @@ # # PROVIDE: pf -# REQUIRE: FILESYSTEMS netif pflog pfsync +# REQUIRE: FILESYSTEMS netif pflog pfsync ppp # BEFORE: routing # KEYWORD: nojail >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200810101639.m9AGdN2c086395>