diff options
| author |   florian <florian@openbsd.org> | 2015-07-19 23:42:58 +0000 |
|---|---|---|
| committer | florian <florian@openbsd.org> | 2015-07-19 23:42:58 +0000 |
| commit | f002925a53ef0c6bf3ba5144a43430ae1fec6803 (patch) | |
| tree | f13541413d1a997c0f127b3d3d617a3720f4827a | |
| parent | rule_item might leak, when pf_create_state() fails (diff) | |
| download | wireguard-openbsd-f002925a53ef0c6bf3ba5144a43430ae1fec6803.tar.xz wireguard-openbsd-f002925a53ef0c6bf3ba5144a43430ae1fec6803.zip | |
Bring up pflow last as it might send with a source address that is on
any of the other interfaces.
OK deraadt, phessler, benno
| -rw-r--r-- | etc/netstart | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/etc/netstart b/etc/netstart index 689947780ec..4832fa31995 100644 --- a/etc/netstart +++ b/etc/netstart @@ -1,6 +1,6 @@ #!/bin/sh - # -# $OpenBSD: netstart,v 1.151 2015/07/19 19:52:36 rpe Exp $ +# $OpenBSD: netstart,v 1.152 2015/07/19 23:42:58 florian Exp $ # Strip comments (and leading/trailing whitespace if IFS is set) from a file # and spew to stdout. @@ -236,7 +236,7 @@ fi # Configure all the non-loopback interfaces which we know about, but # do not start interfaces which must be delayed. Refer to hostname.if(5) -ifmstart "" "trunk svlan vlan carp gif gre pfsync pppoe tun bridge" +ifmstart "" "trunk svlan vlan carp gif gre pfsync pppoe tun bridge pflow" # The trunk interfaces need to come up first in this list. # The (s)vlan interfaces need to come up after trunk. @@ -300,10 +300,11 @@ EOF esac -# Configure PPPoE, GIF, GRE and TUN interfaces, delayed because they require -# routes to be set. TUN might depend on PPPoE, and GIF or GRE may depend on -# either of them. -ifmstart "pppoe tun gif gre bridge" +# Configure PPPoE, GIF, GRE, TUN and PFLOW interfaces, delayed because they +# require routes to be set. TUN might depend on PPPoE, and GIF or GRE may +# depend on either of them. PFLOW might bind to ip addresses configured +# on either of them. +ifmstart "pppoe tun gif gre bridge pflow" # Reject 127/8 other than 127.0.0.1. route -qn add -net 127 127.0.0.1 -reject >/dev/null |