Subject: Re: pf's rc.d script & startup priority
To: None <tech-security@NetBSD.org>
From: Luke Mewburn <lukem@NetBSD.org>
List: tech-security
Date: 08/09/2005 13:01:26
--D9sZ58tf58331Q5M
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
| > | I've tried the REQUIRE line from the ipfilter script in the pf sc=
ript but it
| > | still gets ordered too late. Do you have a suggestion?
| >=20
| > That's because rc.d/network REQUIREs ipfilter.
| > You could try
| > BEFORE: network
| > in rc.d/pf.
| >=20
|=20
| Ah that helps. The ordering is now lkm1, pf, veriexec, ipsec, ipfilter,
| etc..
|=20
| I've attached the diff with changes to the pf script, please review. I'=
ve
| not yet tested if it works with the LKM, will do that later.
At a glance, I think your changes look OK.
Cheers,
Luke.
--D9sZ58tf58331Q5M
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (NetBSD)
iD8DBQFC+ByGpBhtmn8zJHIRAgpAAKDOQ3zMarAYy2G+knUJ+BazJ5BFsQCgyJR/
xYSKZjvLiN+Yvnwf+rIV7IU=
=WpZV
-----END PGP SIGNATURE-----
--D9sZ58tf58331Q5M--