pf starts too early

[Michal-50]

Hello,

I'm using pf on FreeBSD 8.0-RC1. My wlan0-ath0 card is set up via
wpa_supplicant.conf and rc.conf (ifconfig_wlan0="WPA DHCP"). pf also
starts via rc.conf

Problem is that pf cannot start during the system boot because it tries
to load rules before my network card gets authenticated and connected.
Since wlan0 doesn't have IP address at the time I get a lot of:

no IP address found for wlan0
/etc/pf.conf:151: could not parse host specification
no IP address found for wlan0
pfctl: Syntax error in config file: pf rules not loaded
pf enabled

It fills up my dmesg output. Loading rules by hand works perfectly fine.

Any ideas what is wrong or which part of the system should I tweak?

Michal
--
"Attacks always get better; they never get worse." -NSA

_______________________________________________
freebsd-pf@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@..."

[Maxim Khitrov]

On Thu, Oct 15, 2009 at 5:17 PM, Michal <ml@...> wrote:

> Hello,
>
> I'm using pf on FreeBSD 8.0-RC1. My wlan0-ath0 card is set up via
> wpa_supplicant.conf and rc.conf (ifconfig_wlan0="WPA DHCP"). pf also starts
> via rc.conf
>
> Problem is that pf cannot start during the system boot because it tries to
> load rules before my network card gets authenticated and connected. Since
> wlan0 doesn't have IP address at the time I get a lot of:
>
> no IP address found for wlan0
> /etc/pf.conf:151: could not parse host specification
> no IP address found for wlan0
> pfctl: Syntax error in config file: pf rules not loaded
> pf enabled
>
> It fills up my dmesg output. Loading rules by hand works perfectly fine.
>
> Any ideas what is wrong or which part of the system should I tweak?
>
> Michal

See the post I made a few weeks ago on this topic:

http://lists.freebsd.org/pipermail/freebsd-pf/2009-September/005329.html

You may need to tweak the REQUIRE line in /etc/rc.d/pf for your needs,
but otherwise this solution has been working for me without any
problems. Just need to be careful not to revert changes when running
mergemaster.

- Max
_______________________________________________
freebsd-pf@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@..."

[Max Laier]

On Thursday 15 October 2009 23:17:52 Michal wrote:

> Hello,
>
> I'm using pf on FreeBSD 8.0-RC1. My wlan0-ath0 card is set up via
> wpa_supplicant.conf and rc.conf (ifconfig_wlan0="WPA DHCP"). pf also
> starts via rc.conf
>
> Problem is that pf cannot start during the system boot because it tries
> to load rules before my network card gets authenticated and connected.
> Since wlan0 doesn't have IP address at the time I get a lot of:
>
> no IP address found for wlan0
> /etc/pf.conf:151: could not parse host specification
> no IP address found for wlan0
> pfctl: Syntax error in config file: pf rules not loaded
> pf enabled

simply s/wlan0/(wlan0)/ where is appears in a host/address context.  This is
an FAQ.
 
> It fills up my dmesg output. Loading rules by hand works perfectly fine.
>
> Any ideas what is wrong or which part of the system should I tweak?
>
> Michal
>

--
/"\  Best regards,                      | mlaier@...
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
_______________________________________________
freebsd-pf@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@..."

[Michal-50]

Max Laier wrote:
>
> simply s/wlan0/(wlan0)/ where is appears in a host/address context.  This is
> an FAQ.
>  

Thank you, looks that it does the trick. And sorry for missing that one.

Michal
--
"The future is here. It's just not widely distributed yet." -William Gibson
_______________________________________________
freebsd-pf@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@..."