Guest User

Al - pf errors

a guest
Dec 7th, 2016
236
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.61 KB | None | 0 0
  1. Thanks for the help on the FreeBSD upgrade from 10.2 to 10.3 on Digital Ocean it worked a treated.
  2.  
  3. I tested it first by using the snapshot features provided by Digital Ocean, which work really well. I shutdown my live Droplet down and took a snapshot.
  4. Power it back on and then create a new temporary droplet from the snapshot with a new IPaddress. Connected it to made sure every thing was working as expected.
  5. Then I perform the upgrade and everything work perfectly on this temporary droplet. So in my next maintenance window i created a new snapshot on my live droplet and then run the upgrade and it worked great.
  6.  
  7. One thing what i have noticed but this was happening for the upgrade.
  8.  
  9. I am using PF as my firewall.This work great if you manually start it but i have noticed that after reboot the PF service is not started. But once the system has booted you can login and start PF manually.
  10.  
  11. I have pf_enable="yes" in the /etc/rc.conf file.
  12.  
  13. in the logs i see the following
  14.  
  15. kernel: no IP address found for DNSHostname
  16. kernel: /etc/firewall:23: could not parse host specification
  17. kernel: pfctl: Syntax error in config file: pf rules not loaded
  18.  
  19. I have a couple of rule which lookup hostname to match in the firewall rules, So it look like that DNS reslouation has not started yet when PF is trying to start and then fails as it has a invaild PF config file. If i change the rules to match a IP address and reboot the server server PF start correctly.
  20.  
  21. I have try moving the PF line in the end of the /etc/rc.conf file encase this give enough time for the DNS resolution to work.
  22.  
  23. Any ideas how this could be fixed
  24.  
  25. Al
Add Comment
Please, Sign In to add comment