ipfilter and DHCP

Ok...what do you guys do to handle a change of IP/network via DHCP with ipfilter?

I have been told that if my IP changes while the machine is up and running that ipfilter WON'T see this change and needs to be told...supposedly it only reads the IP when it starts itself.

If this is true, is there any easy way to fix this?
I run ipcheck.py and that can invoke a script if needed if it notices and IP changed....

ipnat.conf:
map bge1 192.43.82.0/24 -> 0/32 proxy port ftp ftp/tcp
map bge1 192.43.82.0/24 -> 0/32 portmap tcp/udp auto
map bge1 192.43.82.0/24 -> 0/32

rdr bge1 0.0.0.0/0 port 25 -> 192.43.82.170 port 25


I presume if it reads the IP and fills in the '0/32' + '0.0.0.0/0' values at startup...having my IP change could be disasterous.

thanks for any tips-

-JD

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: force use of a well known dhcp server
    ... add 'ipfilter' rules to block out DHCP packets from other MAC ... I'm afraid ipfilter is not the most common packet filter on Linux. ... this approach may fail because some DHCP clients such as dhclient from the ISC DHCP package capture incoming packets at the interface - just like packet sniffers - and not at the IP layer. ...
    (comp.os.linux.networking)
  • Re: my lame attempt at a shell script...
    ... > pf - I wrote a replacement for ipfilter as I got dizzy trying to ... > Regarding your script, which I got deleted from this mail, I ... so you have to be careful about quotes and spacing. ...
    (freebsd-questions)
  • Re: my lame attempt at a shell script...
    ... I don't know if you're on 5.x, nor whether you use ipfw, ipfilter or pf ... Create your script and load rc.subr: ... bash is available when your script run. ...
    (freebsd-questions)
  • Re: my lame attempt at a shell script...
    ... On Jan 3, 2005, at 3:34 PM, Erik Norgaard wrote: ... > pf - I wrote a replacement for ipfilter as I got dizzy trying to ... > Create your script and load rc.subr: ... I'm actually using ipfw, and this script is ...
    (freebsd-questions)
  • Re: my lame attempt at a shell script...
    ... > pf - I wrote a replacement for ipfilter as I got dizzy trying to ... > Create your script and load rc.subr: ... are already built-in means to execute a custom firewall script: ... correct stage of startup, and thus, don't really want to mess with ...
    (freebsd-questions)