From owner-freebsd-pf@FreeBSD.ORG Mon Jul 9 14:44:23 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 89E2716A41F for ; Mon, 9 Jul 2007 14:44:23 +0000 (UTC) (envelope-from roma.a.g@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.175]) by mx1.freebsd.org (Postfix) with ESMTP id 1FF0A13C489 for ; Mon, 9 Jul 2007 14:44:22 +0000 (UTC) (envelope-from roma.a.g@gmail.com) Received: by ug-out-1314.google.com with SMTP id o4so1366252uge for ; Mon, 09 Jul 2007 07:44:22 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:date:from:x-mailer:reply-to:organization:x-priority:message-id:to:subject:mime-version:content-type:content-transfer-encoding; b=K9rkYMGhxx41JB1RFhgdJSvTFO2ZWHYUybrKMfUdZmPBjCatc7s4bYOUM1hjmIUhFSqaB9MXk5yupWhzFbz0YHYt5v0DRFuyyvcWU+Iw9QlnnyggTflexHQDtBqIAEfG3isWffnW89xSRzTJQ/Um7r45QNGDKK3gnqKNkVzgLpQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:date:from:x-mailer:reply-to:organization:x-priority:message-id:to:subject:mime-version:content-type:content-transfer-encoding; b=SeE1h2UAXdJuyK7X8FyQGNZWSAGRLy/3DuABThTE2SX2X3eEw77cLVVw5/dweqBVWiHMWINMsPCXrzSBbbxLT5bXzmX21z/0Bw56eNPu1uR6AlCLov1bJyfUvfzOy8oFYhnF7MsBEFDCV0QJOdtbOK9rtOnNUWFJK6FOqLRUTAI= Received: by 10.66.242.20 with SMTP id p20mr5139361ugh.1183990637649; Mon, 09 Jul 2007 07:17:17 -0700 (PDT) Received: from pridep3.ad.office.acropolis.ru ( [81.211.90.3]) by mx.google.com with ESMTPS id g30sm2817214ugd.2007.07.09.07.17.15 (version=SSLv3 cipher=OTHER); Mon, 09 Jul 2007 07:17:15 -0700 (PDT) Date: Mon, 9 Jul 2007 18:17:58 +0400 From: "Roman Gorohov. " X-Mailer: The Bat! (v3.71.04) Professional Organization: Acropolis X-Priority: 3 (Normal) Message-ID: <395926400.20070709181758@gmail.com> To: freebsd-pf@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Does keep state modify packet anyhow? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "roma.a.g" List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jul 2007 14:44:23 -0000 Hello, list. I have a strange problem, we work with one application that connecting to remote server at start-up(and remote server connect back to the app). The problem is, that when I uncomment keep state option in rule: pass from $lan #keep state in pf.conf its seems that remote server can't connect back... I've checked many times, its depends only on that option, how might that be? Regards, Roman.