Subject: Re: pf's rc.d script & startup priority
To: None <tech-security@NetBSD.org>
From: Luke Mewburn <lukem@NetBSD.org>
Date: 08/09/2005 13:01:26
Content-Type: text/plain; charset=us-ascii
| > | I've tried the REQUIRE line from the ipfilter script in the pf sc=
ript but it
| > | still gets ordered too late. Do you have a suggestion?
| > That's because rc.d/network REQUIREs ipfilter.
| > You could try
| > BEFORE: network
| > in rc.d/pf.
| Ah that helps. The ordering is now lkm1, pf, veriexec, ipsec, ipfilter,
| I've attached the diff with changes to the pf script, please review. I'=
| not yet tested if it works with the LKM, will do that later.
At a glance, I think your changes look OK.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (NetBSD)
-----END PGP SIGNATURE-----