Re: /etc/rc: pf vs. dhclient ... lockd, too

> >Hmm. This is the wrong solution, since it leaves it a nasty port open

Not exactly.

It could open the hole when it needs it.

Later the pf gets turned off. No big deal.

If the user DOES use pf to block packets, then the pf.conf is under their control, and it is their problem. hostname.if could just mention the temporary hole in the wall, and then mention that use of pf of course needs such and such and such kept open for the obvious reasons. Received on Mon Nov 25 13:43:21 2002