rcorder for vpn-like tunnels during early rc.d startup

[Eugene Grosbein]

On 27.12.2018 18:09, Willem Jan Withagen wrote:

> Might want to use the ifup/ifdown scripts to add the specifics for the 
> VPN that just came up. Tricky part is how to get things in the tables at 
> the right place.
> 
> So with IPFW I use specific line numbers reserved to insert certain 
> rules. (using counter rules to split the fw code into blocks)
> 
> But it sort of feels like going back in the 80's basic programming.

Current ipfw implementation allows you to use 'tun*' or table containing interface names:

ipfw table NAME create type iface 
ipfw add 2000 allow ip from any to any via 'table(NAME)'

ipfw table NAME add tap0
ipfw table NAME add tun0

Note you do not have to change ruleset at all; you add or delete table records only.