From owner-freebsd-pf@FreeBSD.ORG  Sat May 12 14:40:54 2012
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C8D701065670
	for <pf@freebsd.org>; Sat, 12 May 2012 14:40:54 +0000 (UTC)
	(envelope-from victordetoni@gmail.com)
Received: from mail-qc0-f182.google.com (mail-qc0-f182.google.com
	[209.85.216.182])
	by mx1.freebsd.org (Postfix) with ESMTP id 826048FC15
	for <pf@freebsd.org>; Sat, 12 May 2012 14:40:54 +0000 (UTC)
Received: by qcsg15 with SMTP id g15so3258902qcs.13
	for <pf@freebsd.org>; Sat, 12 May 2012 07:40:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
	h=mime-version:date:message-id:subject:from:to:content-type;
	bh=d5pwzHMCt9Mx8aiKMEUmGWEfF+1iWNTIUPgKLJDZ9So=;
	b=jwem+7VRVM1MsnRbOmg6700h7zv9lS5EdFbYa4W+ktU0ovAOSki50jMlRe64mxKJne
	539Ws/jwwBBRImUct5S4ruVRiUfi0d8ylOcFOc8vEb0HF1fWKnsxrhkJ7vwnFNaasFJO
	a1uFw6wAGUIHkGjyqxI2n7/eSV3+1X7nTZyPKhuvZbikgBrNKcLG4n9xmgDAgzhuVLWk
	PuQ7LlOcv5Iy3qO/0hvIkPDufijqFLxVd7Wg1cC+HMkw1LPKkyy7hBEf0OPo937tPMTC
	EtHHpxjwOfIuBLMHUWf+QOVXuEOYGSFEP3ItJda/yDgTSdX/kcgLXnufb5sI7KIntEfL
	sOJQ==
MIME-Version: 1.0
Received: by 10.224.34.4 with SMTP id j4mr2873041qad.61.1336833648371; Sat, 12
	May 2012 07:40:48 -0700 (PDT)
Received: by 10.229.228.136 with HTTP; Sat, 12 May 2012 07:40:48 -0700 (PDT)
Date: Sat, 12 May 2012 11:40:48 -0300
Message-ID: <CANpwN=v+=SPGDhmchYhoUiBxGvZj_gifGqk50T1na+0_odM8Cg@mail.gmail.com>
From: Victor Detoni <victordetoni@gmail.com>
To: pf@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: 
Subject: synproxy with sloppy enabled
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 12 May 2012 14:40:54 -0000

hi, I would like to open a discuss about synproxy using sloppy, because
I've been testing pf performance and I cannot reach a lot of traffic,
because assymetric routing we can reach more performance.

Why synproxy can not run with sloppy? Would have serious security problems?
Some needs checks could fail?

tks