PF Start pf after loading of pppoe.

blind0ne

blind0ne

Good morning, I would like to know how to reconfigure pf in order to start it after all other network services has been loaded. I'm using PPPoeE and Evry boot I should restart pf service in order for it to start working. I guess that this rules are been aplied befor actual interface (tun0) even beeing created.
How can I solve this problem? Thnx for attention
 
diizzy said:
forums.freebsd.org

PF - Port forwarding not working - how to fix it?

Hi, I am using a FreeBSD 13.0 box as internet router/gateway. The hardware has two physical NICs, one is for the internal net, the other goes to my DSL connection. vtnet0 is my internal network interface, tun0 my external for PPPoE. What I am trying to achieve is to forward all incoming...
forums.freebsd.org forums.freebsd.org
Click to expand...

So, looking back to this thread I've read that the interface should be surrounded by (), but I still have a question, shuld () be at statemnets where my variable with 'tun0' is used or either at variable defenition itself?

Like that:
ext_if="(tun0)"
or
ext_if=("tun0")
or in rules itself? :
pass quick on ($ext_if) inet proto { tcp udp } from any to any port 53
 
diizzy said:
I'd to by rule and did you define ext_if?

ext_if="tun0"
....
pass in quick on $ext_if inet proto udp to ($ext_if) port { 7777 }
Click to expand...
Oh, thank you so much. now it works, perfectly, But i have one last question. Why in such rule: pass in quick on $ext_if inet proto tcp from { $home $office } to ($ext_if) port 22
the first appearence of $ext_if is without parentheses, what is the explanation
 
The first appearance references the interface pass in on <interface>, the second refers to the address of the interface to ($ext_if). The parenthesis here indicate that the address of the interface is dynamic.
 
You must log in or register to reply here.
Back
Top