From owner-freebsd-pf@FreeBSD.ORG  Wed May  7 22:44:09 2008
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 7B5F9106566C
	for <freebsd-pf@freebsd.org>; Wed,  7 May 2008 22:44:09 +0000 (UTC)
	(envelope-from jdc@parodius.com)
Received: from mx01.sc1.parodius.com (mx01.sc1.parodius.com [72.20.106.3])
	by mx1.freebsd.org (Postfix) with ESMTP id 698CD8FC0C
	for <freebsd-pf@freebsd.org>; Wed,  7 May 2008 22:44:09 +0000 (UTC)
	(envelope-from jdc@parodius.com)
Received: by mx01.sc1.parodius.com (Postfix, from userid 1000)
	id 52CC51CC05B; Wed,  7 May 2008 15:44:09 -0700 (PDT)
Date: Wed, 7 May 2008 15:44:09 -0700
From: Jeremy Chadwick <koitsu@freebsd.org>
To: Ansar Mohammed <ansarm@gmail.com>
Message-ID: <20080507224409.GA77067@eos.sc1.parodius.com>
References: <004f01c8b068$89c89350$9d59b9f0$@com>
	<005101c8b06b$5f0743c0$1d15cb40$@com>
	<008b01c8b081$c74692e0$55d3b8a0$@com> <482215F4.1080806@quis.cx>
	<00a401c8b084$87da9540$978fbfc0$@com>
	<20080507214351.GA74641@eos.sc1.parodius.com>
	<00bc01c8b08e$a080cf60$e1826e20$@com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <00bc01c8b08e$a080cf60$e1826e20$@com>
User-Agent: Mutt/1.5.17 (2007-11-01)
Cc: freebsd-pf@freebsd.org
Subject: Re: UDP weirdness
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 May 2008 22:44:09 -0000

On Wed, May 07, 2008 at 06:06:38PM -0400, Ansar Mohammed wrote:
> So I am using FreeBSD 7 and it doesn't work either way with "keep state"
> there or not. The only catch here is that everything is running on VMWare,
> although that should not matter. I have been using pf for about 2 years now.
> I feel this may be a bit of a bug. 
> 
> I even set the state-policy to floating (which I believe is default) and
> still I need the second rule.

You don't need "keep state" or "keep state flags S/SA" on any of your
rules because you're using RELENG_7.

Regarding the need for the "pass out" line, Max has explained the
reason/need for it in another Email.  It's not a bug.

-- 
| Jeremy Chadwick                                jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                  Mountain View, CA, USA |
| Making life hard for others since 1977.              PGP: 4BD6C0CB |