I had an error in my /etc/pf.conf, that stopped the dns requests from working
Which in turn stopped ntpd from resolving the server names in /etc/ntpd.conf
which in turn caused ntdp to hang the system.

The fix for the problem was to correct my /etc/pf.conf file. My objection
was that I had to do a hardware reset in order to boot in single
user mode to fix the problem. Most other things you screw don't
require a hardware reset.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David Higgs
Sent: Saturday, September 06, 2008 5:02 PM
To: Peter Fraser
Cc: misc@openbsd.org
Subject: Re: ntpd can hang on boot

On Sat, Sep 6, 2008 at 3:48 PM, Peter Fraser <[EMAIL PROTECTED]> wrote:
> The time out for ntpd is definitely more that 10 minutes. I didn't wait any
> longer.
>
>
> The text of the startup pf.conf in /etc/rc is
>
>
>        RULES="block all"
>        RULES="$RULES\npass on lo0"
>        RULES="$RULES\npass in proto tcp from any to any port 22 keep state"
>        RULES="$RULES\npass out proto { tcp, udp } from any to any port 53
> keep state"
>        RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep
> state"
>        if ifconfig lo0 inet6 >/dev/null 2>&1; then
>                RULES="$RULES\npass out inet6 proto icmp6 all icmp6-type
> neighbrsol"
>                RULES="$RULES\npass in inet6 proto icmp6 all icmp6-type
> neighbradv"
>                RULES="$RULES\npass out inet6 proto icmp6 all icmp6-type
> routersol"
>                RULES="$RULES\npass in inet6 proto icmp6 all icmp6-type
> routeradv"
>        fi
>        RULES="$RULES\npass proto carp"
>        case `sysctl vfs.mounts.nfs 2>/dev/null` in
>        *[1-9]*)
>                # don't kill NFS
>                RULES="scrub in all no-df\n$RULES"
>                RULES="$RULES\npass in proto { tcp, udp } from any port {
111,
> 2049 } to any"
>                RULES="$RULES\npass out proto { tcp, udp } from any to any
> port { 111, 2049 }"
>                ;;
>        esac
>        echo $RULES | pfctl -f -
>        pfctl -e
>
> Ok, I admit I had
>  pf=Yes
> in my /etc/rc.conf.local
>
> The rest of your comment are based on the believe that /etc/rc does not
have
> A startup pf.conf.

Did you read the rest of /etc/rc?  Your local pf.conf is still loaded
before ntpd is kicked off.

--david

Reply via email to