> As pppoe is a cloning device there is an issue with ipf/ipnat: at the
> time the rules are loaded the interface doesn't exists.
> A /etc/rc.d/ipfilter reload is enouth for me (ipf -y should do it too).

This depends on the way you do it.

I have "create" as the first line in my /etc/ifconfig.pppoe0 file, and
of course the interface is created before ipnat is loaded. I don't use
the link1 (connect on demand) flag, so the connection is actually allready
established when ipnat is initialized.

But if you are getting dynamic IPs, you will want a ipnat -F somewhere,
I put mine in /etc/ppp/ip-down.

Martin