Date: Mon, 2 Sep 2002 13:26:38 -0700 (PDT) From: Brian Candler <B.Candler@pobox.com> To: freebsd-gnats-submit@FreeBSD.org Subject: bin/42338: pccard_ether should run ipf -y if ipfilter is active Message-ID: <200209022026.g82KQcqE099621@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 42338 >Category: bin >Synopsis: pccard_ether should run ipf -y if ipfilter is active >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Mon Sep 02 13:30:02 PDT 2002 >Closed-Date: >Last-Modified: >Originator: Brian Candler >Release: FreeBSD-4.6.2-RELEASE >Organization: >Environment: >Description: For systems which use ipfilter, after inserting an interface it is necessary to run 'ipf -y' to resync its interface list. For example, pass in quick on wi0 from .... block in log all where wi0 is a pcmcia card: after a reboot all traffic is blackholed until you issue 'ipf -y'. It took me a while to work this out, since 'log' shows the packets being blocked even though they obviously match rules which should let them in :-) >How-To-Repeat: >Fix: I suggest a few lines are added to /etc/pccard_ether based on what rc.network does after adding ppp interfaces: .. set ipfilter_active if either ipfilter_enable or ipnat_enable=YES case ${ipfilter_active} in [Yy][Ee][Ss]) ${ipfilter_program:-/sbin/ipf} -y ${ipfilter_flags} >/dev/null ;; esac >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209022026.g82KQcqE099621>