On Sat, Mar 02, 2002 at 09:01:24AM +0100, Martin Husemann wrote:
> > As pppoe is a cloning device there is an issue with ipf/ipnat: at the
> > time the rules are loaded the interface doesn't exists.
> > A /etc/rc.d/ipfilter reload is enouth for me (ipf -y should do it too).
> 
> This depends on the way you do it.
> 
> I have "create" as the first line in my /etc/ifconfig.pppoe0 file, and
> of course the interface is created before ipnat is loaded. I don't use
> the link1 (connect on demand) flag, so the connection is actually allready
> established when ipnat is initialized.

yes, ipnat is initialised after interfaces are configured. But ipf rules
are loaded before (so that there is no windows where network is up but
ipf won't block anything).

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
--