> > > Third question: I'm not sure the pppd launch belongs to the hotplug > > > event manager. Hotplug is run before any network services, so the > > > connection would be done before any firewall would be up... As you > > > see it's not really a question, just a loud thought ;-) > > > > It is convenient though. You could launch pppd in an init script of > > course and it wouldn't make much difference, except if you replug the > > modem. By the way, won't your firewall barf if ppp0 does not exist > > when you try to do (example) masquerading with it? > > No, I've never seen a firewall complaining about rules applied on > unknown interfaces. It would be a clear implementation flaw if it did > so, as it's good(tm) to prepare rules before the interface is up :-)
How about this as a solution: turn on ppp's demand dialing option. That way, pppd can be used in the hotplug script (which is convenient) without (hopefully) compromising security. > Btw if you include a ppp interface upping stage in this script, you > have to include a ppp interface downing stage, otherwise the ISP is > just not aware of your disconnection through the PPP > communication. This was a cause of problems in early aDSL days where > IPs were allocated and never freed in the ISP side. Nowadays this > problem is no more afaik. If you hit pppd with a SIGTERM, it tells the ISP it is going down, right? All the best, Duncan. Liste de diffusion modem ALCATEL SpeedTouch USB Pour se d�sinscrire : mailto:[EMAIL PROTECTED]
