Re: RC Service Order

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Craig White
Date:  
To: Main PLUG discussion list
Subject: Re: RC Service Order
I don't recall ever creating firewall rules for the tun or tap
interfaces.

Craig

On Wed, 2009-09-16 at 20:18 -0700, Eric Cope wrote:
> That was my concern. However, PF fails to start properly because the
> VPN TUN interface isn't established yet. Have you had issues like this
> on other systems?
> Eric
>
> On Wed, Sep 16, 2009 at 6:59 PM, Craig White <>
> wrote:
>         On Wed, 2009-09-16 at 18:38 -0700, Eric Cope wrote:
>         > I need openvpn, then samba, and finally pf (packet filter).
>         Its
>         > currently the reverse order.
>         > I know where the conf file is, where is the script?

>
>         ----
>         I don't know enough about BSD but in general, you want the
>         packet filter
>         scripts to run early, even before network devices are up and
>         running
>         because if you have a system hang in between starting the
>         network
>         devices and the packet filtering, you have a very exposed
>         system.

>
>         I would suspect that the reason you are wanting to fiddle with
>         what is
>         probably an already well considered sequence is to try to get
>         around a
>         problem that should probably be solved elsewhere.

>
>         It seems to me that having pf, samba and openvpn load in this
>         order is
>         the logical way. Whatever problems you are experiencing are
>         probably
>         best solved without tinkering with this.

>
>         Craig





--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss