X-Git-Url: http://git.ozlabs.org/?p=ppp.git;a=blobdiff_plain;f=pppd%2Fpppd.8;fp=pppd%2Fpppd.8;h=bcb3e669fd4dcabd26963ebc033d87477c2472e5;hp=accddf8b940b3d6fb5a7d554c248ffec065978f4;hb=ec4108acfc11f02151d49bbf20d62988dc2586c2;hpb=f2af1c05596be799c0c0ec1e451b8b0ae5ddabc6 diff --git a/pppd/pppd.8 b/pppd/pppd.8 index accddf8..bcb3e66 100644 --- a/pppd/pppd.8 +++ b/pppd/pppd.8 @@ -1,5 +1,5 @@ .\" manual page [] for pppd 2.4 -.\" $Id: pppd.8,v 1.85 2005/08/25 12:10:18 paulus Exp $ +.\" $Id: pppd.8,v 1.86 2005/08/26 00:06:35 paulus Exp $ .\" SH section heading .\" SS subsection heading .\" LP paragraph @@ -433,7 +433,8 @@ Set the IPCP restart interval (retransmission timeout) to \fIn\fR seconds (default 3). .TP .B ipparam \fIstring -Provides an extra parameter to the ip\-up and ip\-down scripts. If this +Provides an extra parameter to the ip\-up, ip\-pre\-up and ip\-down +scripts. If this option is given, the \fIstring\fR supplied is given as the 6th parameter to those scripts. .TP @@ -1524,7 +1525,8 @@ We failed to authenticate ourselves to the peer. Pppd invokes scripts at various stages in its processing which can be used to perform site-specific ancillary processing. These scripts are usually shell scripts, but could be executable code files instead. -Pppd does not wait for the scripts to finish. The scripts are +Pppd does not wait for the scripts to finish (except for the ip-pre-up +script). The scripts are executed as root (with the real and effective user-id set to 0), so that they can do things such as update routing tables or run privileged daemons. Be careful that the contents of these scripts do @@ -1604,6 +1606,15 @@ A program or script which is executed when the link goes down, if /etc/ppp/auth\-up was previously executed. It is executed in the same manner with the same parameters as /etc/ppp/auth\-up. .TP +.B /etc/ppp/ip\-pre\-up +A program or script which is executed just before the ppp network +interface is brought up. It is executed with the same parameters as +the ip\-up script (below). At this point the interface exists and has +IP addresses assigned but is still down. This can be used to +add firewall rules before any IP traffic can pass through the +interface. Pppd will wait for this script to finish before bringing +the interface up, so this script should run quickly. +.TP .B /etc/ppp/ip\-up A program or script which is executed when the link is available for sending and receiving IP packets (that is, IPCP has come up). It is @@ -1615,7 +1626,8 @@ remote\-IP\-address ipparam\fR .B /etc/ppp/ip\-down A program or script which is executed when the link is no longer available for sending and receiving IP packets. This script can be -used for undoing the effects of the /etc/ppp/ip\-up script. It is +used for undoing the effects of the /etc/ppp/ip\-up and +/etc/ppp/ip\-pre\-up scripts. It is invoked in the same manner and with the same parameters as the ip\-up script. .TP