Subject: Re: ipfirewall and rc.d scripts
To: Michal Stepien <prezi77@wp.pl>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: tech-security
Date: 07/13/2005 20:23:10
On Wed, Jul 13, 2005 at 10:27:10AM +0200, Michal Stepien wrote:
> Problem relates to netbsd 2.0.2-STABLE on i386.
>
> In /etc/rc.conf I have something like this:
> wscons=YES
> # dhclient) may be needed to get the network operational enough to mount
> #dhclient=YES # behave as a DHCP client
> hostname="hellboy"
> sshd=YES
> sendmail=NO
> postfix=YES
> ipnat=YES # uses /etc/ipnat.conf
> ipfilter=YES # uses /etc/ipf.conf
> ipmon=YES ipmon_flags="-Dns" # syslog ipfilter
> messages
> altqd=YES altqd_flags=""
> securelevel="1" # securelevel to set to
> dhcpd=YES dhcpd_flags="-q"
> fsck_flags="-p -y"
>
> Ipfilter and ipnat rules seems to be proper but neither ipfilter nor
> ipnat do not work after system startup.
> ipf -V prints:
>
> ipf: IP Filter: v4.1.3 (396)
> Kernel: IP Filter: v4.1.3
> Running: yes
> Log Flags: 0 = none set
> Default: pass all, Logging: available
> Active list: 0
> Feature mask: 0x10a
>
> To make it workable I had to put in /etc/rc.local something like this:
>
> cd /etc/rc.d && ./ipfilter restart && ./ipnat restart
>
> In the same netbsd on macppc everything is ok. What is wrong?
Do you have some hostname in your ipf.conf ? Are these hostnames in
/etc/hosts ?
--
Manuel Bouyer <bouyer@antioche.eu.org>
NetBSD: 26 ans d'experience feront toujours la difference
--