Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 17 Oct 2009 07:44:38 -0400
From:      Maxim Khitrov <mkhitrov@gmail.com>
To:        =?UTF-8?B?RMOhbmllbGlzeiBMw6FzemzDsw==?= <laszlo_danielisz@yahoo.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: pf, ssh related question
Message-ID:  <26ddd1750910170444n7050b286u572ee18b13469e9c@mail.gmail.com>
In-Reply-To: <880435.50203.qm@web30808.mail.mud.yahoo.com>
References:  <880435.50203.qm@web30808.mail.mud.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
2009/10/17 D=C3=A1nielisz L=C3=A1szl=C3=B3 <laszlo_danielisz@yahoo.com>:
> Hello,
>
> I have the following annoying thing: all the time I runpfctl -F all -f /e=
tc/pf.conf I got disconnected from my remote machine.
> Do you have any idea how can I avoid this?

If you are just trying to reload the changes made to pf.conf, use
"/etc/rc.d/pf reload". That flushes everything except for the state
table, leaving your connections intact. Another method is to set
"flags any" for each rule, which should allow connections to recover
after the states are flushed, but this would be a bad idea
security-wise.

- Max



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?26ddd1750910170444n7050b286u572ee18b13469e9c>