Re: delay npf/npfd service start at boot

2018-11-28 Thread Paolo Vincenzo Olivo




On Wed, 28 Nov 2018, Leonardo Taccari wrote:

It did! thank you, even more for faving replied so quickly. NPF now waits 
for wpa_supplicant to connect and dhdpcd 
to assign an adress to the interface, npfd starts normally as expected.


I didn't even know about ifaddrs() until this very moment

Best regards,
Paolo



Hello Paolo,

Paolo Vincenzo Olivo writes:

[...]
I think npf is enabled over a wireless interface, it
doesn't wait for wpa_supplicant to establish a working connection, thus
failing to
apply npf.conf, and retunrning:

/etc/npf.conf#$line#$column: no address matched for interface $if near ')'

[...]

How can I properly address this problem? (e.g. an idea could be writing a sleep 
script)

[...]


If you are using inet4/inet6 I think that using ifaddrs instead will do
the trick (if it is a similar case reported in PR bin/53512).



Re: delay npf/npfd service start at boot

2018-11-28 Thread Leonardo Taccari
Hello Paolo,

Paolo Vincenzo Olivo writes:
> [...]
> I think npf is enabled over a wireless interface, it 
> doesn't wait for wpa_supplicant to establish a working connection, thus 
> failing to 
> apply npf.conf, and retunrning:
>
> /etc/npf.conf#$line#$column: no address matched for interface $if near ')'
>
> [...]
>
> How can I properly address this problem? (e.g. an idea could be writing a 
> sleep script)
>
> [...]

If you are using inet4/inet6 I think that using ifaddrs instead will do
the trick (if it is a similar case reported in PR bin/53512).


delay npf/npfd service start at boot

2018-11-28 Thread Paolo Vincenzo Olivo

Hi,
I think npf is enabled over a wireless interface, it 
doesn't wait for wpa_supplicant to establish a working connection, thus 
failing to 
apply npf.conf, and retunrning:


/etc/npf.conf#$line#$column: no address matched for interface $if near ')'

predictably `npfctl show` returns
# filtering:inactive
# config:   loaded

npfd fails to start subsequently, returning:

npfd: pcap_dump_open failed for `/var/log/npflog0.pcap'

If I use service() to restart npf/npfd manually I get no  stderr, 
everything works, my confing is applied as expected and I can tcpdump 
npflog0.pcap to display logs.


I tried adding wpa_supplicant, dhcpcd and NETWORKING to the '#
 REQUIRE: ' entry of /etc/rc.d/, but this didn't work the problem out: 
albeit rcorder is followed, and npf waits for wpa_supplicant and dhcpcd 
to start, it still actually start before a connection is established.


How can I properly address this problem? (e.g. an idea could be writing a sleep 
script)

Thanks in advance