Re: pf.conf: best practice for IP address lookup?

2017-04-16 Thread Marc Peters
Am 04/16/17 um 16:49 schrieb Florian Ermisch: > But then I couldn't even say if an address change would trigger > ifstated(8)… In this case it would, because an IPv6 address change at Deutsche Telekom is triggered by a reconnect. I use ifstated to trigger an asterisk and pf reload. > > Regards,

Re: pf.conf: best practice for IP address lookup?

2017-04-16 Thread Florian Ermisch
Am 16. April 2017 14:22:42 MESZ schrieb Florian Ermisch : >Am 16. April 2017 10:54:51 MESZ schrieb Harald Dunkel >: >>Hash: SHA256 >> >>Hi Florian, >> >>sorry to say, but you missed the point. The IP address of >>*another* host inside my LAN changes, e.g. a mail server, >>a http proxy, etc. The int

Re: pf.conf: best practice for IP address lookup?

2017-04-16 Thread Florian Ermisch
Am 16. April 2017 10:54:51 MESZ schrieb Harald Dunkel : >Hash: SHA256 > >Hi Florian, > >sorry to say, but you missed the point. The IP address of >*another* host inside my LAN changes, e.g. a mail server, >a http proxy, etc. The interface identifier of each host is >surely stable. The prefix is not

Re: pf.conf: best practice for IP address lookup?

2017-04-16 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Florian, sorry to say, but you missed the point. The IP address of *another* host inside my LAN changes, e.g. a mail server, a http proxy, etc. The interface identifier of each host is surely stable. The prefix is not. Using the old prefix in pf.

Re: pf.conf: best practice for IP address lookup?

2017-04-16 Thread Florian Ermisch
Hi Harald, just use `($IFACE)` to get interface's current IP (with the rules being updated when the IP changes). In addition you can use the interface group `egress` to address the interface which is used for the default route. Both options are used together in the OpenBSD router tutorial on bsdno

pf.conf: best practice for IP address lookup?

2017-04-15 Thread Harald Dunkel
Hi folks, Since I don't get a static IPv6 prefix from Deutsche Telekom, but a different prefix on every new pppoe connection, I have to rely upon some lookup service for pf.conf. pf.conf(5) doesn't mention dynamic IP addresses at all (except for its own interfaces), so I wonder what is best pract