From owner-freebsd-pf@FreeBSD.ORG  Thu May 15 01:25:44 2008
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B95B51065686
	for <freebsd-pf@freebsd.org>; Thu, 15 May 2008 01:25:44 +0000 (UTC)
	(envelope-from tom@uffner.com)
Received: from eris.uffner.com (eris.uffner.com [207.245.121.212])
	by mx1.freebsd.org (Postfix) with ESMTP id 71BE98FC12
	for <freebsd-pf@freebsd.org>; Thu, 15 May 2008 01:25:44 +0000 (UTC)
	(envelope-from tom@uffner.com)
Received: from xiombarg.uffner.com
	(static-71-162-143-94.phlapa.fios.verizon.net [71.162.143.94])
	(authenticated bits=0)
	by eris.uffner.com (8.14.2/8.14.2) with ESMTP id m4F1Phur084351
	for <freebsd-pf@freebsd.org>; Wed, 14 May 2008 21:25:43 -0400 (EDT)
	(envelope-from tom@uffner.com)
DomainKey-Signature: a=rsa-sha1; s=eris; d=uffner.com; c=nofws; q=dns;
	h=message-id:date:from:to:subject:references:in-reply-to;
	b=CjAfdmCeImsbPmnX37Z/0iA3SvyYkg+8YDb7l3nh6B4qK2agj1mxdDrDpS3RN42j7
	2OPpDJpoGq1gl3jvDLj/Q==
Message-ID: <482B9117.9070800@uffner.com>
Date: Wed, 14 May 2008 21:25:43 -0400
From: Tom Uffner <tom@uffner.com>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US;
	rv:1.8.1.13) Gecko/20080430 SeaMonkey/1.1.9
MIME-Version: 1.0
To: freebsd-pf@freebsd.org
References: <C65291A68BAF57499B18564A1EE4A761370E38@UXCHANGE1.UoA.auckland.ac.nz>	<fee88ee40805141613k685c1536w9fc72e88aaa9f746@mail.gmail.com>	<482B7BE6.9080608@uffner.com>
	<C65291A68BAF57499B18564A1EE4A761370E53@UXCHANGE1.UoA.auckland.ac.nz>
	<482B80D3.4010701@quis.cx>
	<C65291A68BAF57499B18564A1EE4A761370E5A@UXCHANGE1.UoA.auckland.ac.nz>
In-Reply-To: <C65291A68BAF57499B18564A1EE4A761370E5A@UXCHANGE1.UoA.auckland.ac.nz>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by
	milter-greylist-3.0 (eris.uffner.com [192.168.1.212]);
	Wed, 14 May 2008 21:25:43 -0400 (EDT)
X-Virus-Scanned: ClamAV 0.92.1/7115/Tue May 13 17:19:43 2008 on eris.uffner.com
X-Virus-Status: Clean
Subject: Re: FreeBSD PF 4.1 Inserts Flags S/SA Automatically to rules
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 15 May 2008 01:25:44 -0000

Mark Pagulayan wrote:
> I am using bridge pf:
> 
> I only allow pass all on my internal interface. So there is no other
> rule for that interface. How do I know that states are mismatched for
> both internal and external? 

could you post your full ruleset and a quick description of your net
topology? then maybe someone can identify the most likely sources of
your state mismatches.