Re: Dynamic IP assignment and firewall rues

["Rolen, Mark E." <MERolen@apacmail.com>]

Stan,

Set your firewall rules up so that they don't rely on your external IP
address, which as you've stated, has the potential to change.  Instead of
"pass out from 65.64.63.62/32 to any..." use "pass out from $ext_if to
any..." with a macro defined for your external interface...   Works just as
well, and no hard-coded addresses to mess with.

Mark

-----Original Message-----
From: stan [mailto:stanb@panix.com] 
Sent: Friday, June 13, 2003 2:36 PM
To: misc@openbsd.org
Subject: Dynamic IP assignment and firewall rues


I'm in the process of building a 3.3 machine to replace a faithful 2.7
machine. I connect to the world through a Comcast cable modem. Under some
circumstances, I get a different IP address assigned to the external
interface. I have been editing the firewall rules by hand when this happens,
but I would like to automate this on the new machine.

Is this possible? If so where can I find docs on how to do it?

Thanks.

-- 
"They that would give up essential liberty for temporary safety deserve
neither liberty nor safety."
						-- Benjamin Franklin