summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Hartmeier <dhartmei@cvs.openbsd.org>2005-06-14 22:49:07 +0000
committerDaniel Hartmeier <dhartmei@cvs.openbsd.org>2005-06-14 22:49:07 +0000
commit59a2d2c9eab631fc331e1857eb183d2203358dcc (patch)
tree3deb8987467576111ba6d5e58f8a1022d4216731
parent4729e5285b543b98164d968fbc2cb3ca2c43fc46 (diff)
split the dummy ruleset pfctl -f - -e into separate -f - and -e.
relevant when the dummy ruleset can't be loaded, we still want to enable pf, otherwise the real ruleset (even if that does load correctly) won't be active. might happen on a non-GENERIC kernel or after an update (before /etc is manually updated). reported by Jim Rees. ok frantzen@
-rw-r--r--etc/rc5
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/rc b/etc/rc
index e3245baf591..4fa90438432 100644
--- a/etc/rc
+++ b/etc/rc
@@ -1,4 +1,4 @@
-# $OpenBSD: rc,v 1.268 2005/06/02 20:09:38 tholo Exp $
+# $OpenBSD: rc,v 1.269 2005/06/14 22:49:06 dhartmei Exp $
# System startup script run by init on autoboot
# or after single-user.
@@ -234,7 +234,8 @@ if [ X"${pf}" != X"NO" ]; then
RULES="$RULES\npass out proto udp from any to any port { 111, 2049 }"
;;
esac
- echo $RULES | pfctl -f - -e
+ echo $RULES | pfctl -f -
+ pfctl -e
fi
sysctl_conf