On Mon, 04 Jun 2007 23:17:38 +0200
Volker <[EMAIL PROTECTED]> wrote:

> without seeing your pf.conf ruleset, I guess you're using a ppp
> connection to your upstream provider and firewalling on the tunX
> interface (using tun0 as $ext_if).
> 
> As FreeBSD boots up, this interface does not yet exist when pf is
> loaded. As soon as ppp is loaded and interface tun0 has been created,
> pf will happily load your ruleset.
> 
> The solution is to either have pf rules loaded late (later than ppp is
> started) or use anchors and load ext rules into the anchor when the
> ppp interface is up. The easier is to have the rules loading late
> (check using rcorder) but this may also fail if something goes wrong
> with ppp.

The ppp rc.d script resyncs pf and ipfilter, to pick-up new interfaces,
so that shouldn't be needed.
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to