pfsync rc script breaks pfsync on cloned interfaces

From: Ian Freislich <ianf_at_clue.co.za>
Date: Thu, 25 Jun 2009 14:58:31 +0200
Hi

This change has broken pfsync start for me:

--- rc.d/pfsync 10 Apr 2007 16:42:13 -0000      1.5
+++ rc.d/pfsync 1 Jun 2009 05:35:03 -0000       1.6
_at__at_ -1,10 +1,10 _at__at_
 #!/bin/sh
 #
-# $FreeBSD: src/etc/rc.d/pfsync,v 1.5 2007/04/10 16:42:13 keramida Exp $
+# $FreeBSD: src/etc/rc.d/pfsync,v 1.6 2009/06/01 05:35:03 dougb Exp $
 #
 
 # PROVIDE: pfsync
-# REQUIRE: FILESYSTEMS netif
+# REQUIRE: FILESYSTEMS
 # KEYWORD: nojail

The issue is that the syncdev is a cloned interface:

pfsync_enable="YES"
pfsync_syncdev="vlan5"
pfsync_syncpeer="41.154.0.2"

And now pfsync starts before the vlan interface starts, which means
that in practice, it doesn't start.  I can see the argument that
pfsync is a "network interface", but really, it does need netif for
my case unless there is some other way to do this.

Ian

--
Ian Freislich
Received on Thu Jun 25 2009 - 10:58:36 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:50 UTC