On Sat, Sep 6, 2008 at 3:48 PM, Peter Fraser <[EMAIL PROTECTED]> wrote:
> The time out for ntpd is definitely more that 10 minutes. I didn't wait any
> longer.
>
>
> The text of the startup pf.conf in /etc/rc is
>
>
> RULES="block all"
> RULES="$RULES\npass on lo0"
> RULES="$RULES\npass in proto tcp from any to any port 22 keep state"
> RULES="$RULES\npass out proto { tcp, udp } from any to any port 53
> keep state"
> RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep
> state"
> if ifconfig lo0 inet6 >/dev/null 2>&1; then
> RULES="$RULES\npass out inet6 proto icmp6 all icmp6-type
> neighbrsol"
> RULES="$RULES\npass in inet6 proto icmp6 all icmp6-type
> neighbradv"
> RULES="$RULES\npass out inet6 proto icmp6 all icmp6-type
> routersol"
> RULES="$RULES\npass in inet6 proto icmp6 all icmp6-type
> routeradv"
> fi
> RULES="$RULES\npass proto carp"
> case `sysctl vfs.mounts.nfs 2>/dev/null` in
> *[1-9]*)
> # don't kill NFS
> RULES="scrub in all no-df\n$RULES"
> RULES="$RULES\npass in proto { tcp, udp } from any port { 111,
> 2049 } to any"
> RULES="$RULES\npass out proto { tcp, udp } from any to any
> port { 111, 2049 }"
> ;;
> esac
> echo $RULES | pfctl -f -
> pfctl -e
>
> Ok, I admit I had
> pf=Yes
> in my /etc/rc.conf.local
>
> The rest of your comment are based on the believe that /etc/rc does not have
> A startup pf.conf.
Did you read the rest of /etc/rc? Your local pf.conf is still loaded
before ntpd is kicked off.
--david
