fbsd 6.2 pf starts -- but not on boot

[RW]

On Mon, 04 Jun 2007 23:17:38 +0200
Volker <volker at vwsoft.com> wrote:


> without seeing your pf.conf ruleset, I guess you're using a ppp
> connection to your upstream provider and firewalling on the tunX
> interface (using tun0 as $ext_if).
> 
> As FreeBSD boots up, this interface does not yet exist when pf is
> loaded. As soon as ppp is loaded and interface tun0 has been created,
> pf will happily load your ruleset.
> 
> The solution is to either have pf rules loaded late (later than ppp is
> started) or use anchors and load ext rules into the anchor when the
> ppp interface is up. The easier is to have the rules loading late
> (check using rcorder) but this may also fail if something goes wrong
> with ppp.

The ppp rc.d script resyncs pf and ipfilter, to pick-up new interfaces,
so that shouldn't be needed.