>Number:         10958
>Category:       misc
>Synopsis:       ipnat needs to run before securelevel
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    misc-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Sep 05 14:37:00 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     Michael Santos
>Release:        NetBSD-current 020900
>Organization:
	
>Environment:
	
System: NetBSD ack 1.5E NetBSD 1.5E (ack) #2: Sat Sep 2 21:17:05 EDT 2000 mike@ethmoid:/usr/a/src/sys/arch/i386/compile/ack i386


>Description:
ipnat needs to be configured before the securelevel is set.
>How-To-Repeat:
echo 'securelevel="2"' >> /etc/rc.conf && reboot
>Fix:
Ensure /etc/rc.d/ipnat runs before securelevel:

--- /usr/a/src/etc/rc.d/ipnat   Tue Aug 22 21:15:47 2000
+++ ipnat       Tue Sep  5 12:47:31 2000
@@ -6,4 +6,5 @@
 # PROVIDE: ipnat
 # REQUIRE: ipfilter mountcritremote
+# BEFORE: securelevel
 
 . /etc/rc.subr

>Release-Note:
>Audit-Trail:
>Unformatted: