Date: Wed, 7 May 2008 15:44:09 -0700 From: Jeremy Chadwick <koitsu@freebsd.org> To: Ansar Mohammed <ansarm@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: UDP weirdness Message-ID: <20080507224409.GA77067@eos.sc1.parodius.com> In-Reply-To: <00bc01c8b08e$a080cf60$e1826e20$@com> References: <004f01c8b068$89c89350$9d59b9f0$@com> <005101c8b06b$5f0743c0$1d15cb40$@com> <008b01c8b081$c74692e0$55d3b8a0$@com> <482215F4.1080806@quis.cx> <00a401c8b084$87da9540$978fbfc0$@com> <20080507214351.GA74641@eos.sc1.parodius.com> <00bc01c8b08e$a080cf60$e1826e20$@com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, May 07, 2008 at 06:06:38PM -0400, Ansar Mohammed wrote: > So I am using FreeBSD 7 and it doesn't work either way with "keep state" > there or not. The only catch here is that everything is running on VMWare, > although that should not matter. I have been using pf for about 2 years now. > I feel this may be a bit of a bug. > > I even set the state-policy to floating (which I believe is default) and > still I need the second rule. You don't need "keep state" or "keep state flags S/SA" on any of your rules because you're using RELENG_7. Regarding the need for the "pass out" line, Max has explained the reason/need for it in another Email. It's not a bug. -- | Jeremy Chadwick jdc at parodius.com | | Parodius Networking http://www.parodius.com/ | | UNIX Systems Administrator Mountain View, CA, USA | | Making life hard for others since 1977. PGP: 4BD6C0CB |
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080507224409.GA77067>