Subject: Re: ipfirewall and rc.d scripts
To: Michal Stepien <prezi77@wp.pl>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: tech-security
Date: 07/13/2005 20:23:10
On Wed, Jul 13, 2005 at 10:27:10AM +0200, Michal Stepien wrote:
> Problem relates to netbsd 2.0.2-STABLE on i386.
> 
> In /etc/rc.conf I have something like this:
> wscons=YES
> # dhclient) may be needed to get the network operational enough to mount
> #dhclient=YES                           # behave as a DHCP client
> hostname="hellboy"
> sshd=YES
> sendmail=NO
> postfix=YES
> ipnat=YES                                       # uses /etc/ipnat.conf
> ipfilter=YES                                    # uses /etc/ipf.conf
> ipmon=YES               ipmon_flags="-Dns"      # syslog ipfilter
> messages
> altqd=YES               altqd_flags=""
> securelevel="1"                                 # securelevel to set to
> dhcpd=YES               dhcpd_flags="-q"
> fsck_flags="-p -y"
> 
> Ipfilter and ipnat rules seems to be proper but neither ipfilter nor
> ipnat do not work after system startup.
> ipf -V prints:
> 
> ipf: IP Filter: v4.1.3 (396)
> Kernel: IP Filter: v4.1.3               
> Running: yes
> Log Flags: 0 = none set
> Default: pass all, Logging: available
> Active list: 0
> Feature mask: 0x10a
> 
> To make it workable I had to put in /etc/rc.local something like this:
> 
> cd /etc/rc.d && ./ipfilter restart && ./ipnat restart
> 
> In the same netbsd on macppc everything is ok. What is wrong?

Do you have some hostname in your ipf.conf ? Are these hostnames in
/etc/hosts ?

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
     NetBSD: 26 ans d'experience feront toujours la difference
--