Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 May 2008 11:07:03 -0700
From:      xSAPPYx <xsappyx@gmail.com>
To:        RW <fbsd06@mlists.homeunix.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: problem on pf @ freebsd 7.0
Message-ID:  <8206ae960805141107i7aa1df77y2f03b1a421e86450@mail.gmail.com>
In-Reply-To: <20080514132455.4a9e2755@gumby.homeunix.com.>
References:  <15af975d0805131824i142a4847u852a6ad09f61e526@mail.gmail.com> <20080514132455.4a9e2755@gumby.homeunix.com.>

next in thread | previous in thread | raw e-mail | index | archive | help
Take a look in /etc/defaults/rc.conf  The bits for PF are already
there. All you should need is to set   pf_enable="YES"
A quick guess would be that that /etc/defaults/rc.conf is loaded after
/etc/rc.conf, and pf_enable is reset to NO, but that is just a guess.

Here is my pf section from /etc/defaults/rc.conf  that brings pf up on boot:

<snip>
pf_enable="YES"                 # Set to YES to enable packet filter (pf)
pf_rules="/etc/pf.conf"         # rules definition file for pf
pf_program="/sbin/pfctl"        # where the pfctl program lives
pf_flags=""                     # additional flags for pfctl
pflog_enable="YES"              # Set to YES to enable packet filter logging
pflog_logfile="/var/log/pflog"  # where pflogd should store the logfile
pflog_program="/sbin/pflogd"    # where the pflogd program lives
pflog_flags=""                  # additional flags for pflogd
<snip>

On Wed, May 14, 2008 at 5:24 AM, RW <fbsd06@mlists.homeunix.com> wrote:
> On Wed, 14 May 2008 09:24:52 +0800
> "CyberSans AirBort" <cybersans@gmail.com> wrote:
>
>> and guess what? pf is not loading when startup. i have to manually
>> restarted the pf using /etc/rc.d/pf restart
>
> What exactly do you mean by "not loading"? Do you mean not working?
>
> Are there any pf related error messages in /var/log/messages.
>
> In some case pf does need a /etc/rc.d/pf resync (or restart) done
> at a later stage. e.g if  pf.conf uses hostnames that can't be resolved
> at that stage of the boot.
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8206ae960805141107i7aa1df77y2f03b1a421e86450>