From owner-freebsd-pf@FreeBSD.ORG  Wed Jan 13 11:25:09 2010
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C70CE106568D
	for <freebsd-pf@freebsd.org>; Wed, 13 Jan 2010 11:25:09 +0000 (UTC)
	(envelope-from gofdp-freebsd-pf@m.gmane.org)
Received: from lo.gmane.org (lo.gmane.org [80.91.229.12])
	by mx1.freebsd.org (Postfix) with ESMTP id 80C028FC19
	for <freebsd-pf@freebsd.org>; Wed, 13 Jan 2010 11:25:08 +0000 (UTC)
Received: from list by lo.gmane.org with local (Exim 4.50) id 1NV1LV-0000oK-8X
	for freebsd-pf@freebsd.org; Wed, 13 Jan 2010 12:25:05 +0100
Received: from 85.173.92.192 ([85.173.92.192])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-pf@freebsd.org>; Wed, 13 Jan 2010 12:25:05 +0100
Received: from dsh by 85.173.92.192 with local (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-pf@freebsd.org>; Wed, 13 Jan 2010 12:25:05 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-pf@freebsd.org
From: Denis Shaposhnikov <dsh@wizard.volgograd.ru>
Date: Wed, 13 Jan 2010 14:07:22 +0300
Lines: 13
Message-ID: <hik9ha$ldd$1@ger.gmane.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: 85.173.92.192
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US;
	rv:1.9.1.5) Gecko/20091219 Thunderbird/3.0
X-Enigmail-Version: 1.0
Sender: news <news@ger.gmane.org>
Subject: synproxy doesn't work after upgrading to RELENG_8_0
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jan 2010 11:25:09 -0000

Hello!

After upgrading to RELENG_8_0 I've found next rule doesn't work:

  pass in quick proto tcp to port { http https } flags S/SA synproxy state

but same rule without synproxy works fine:

  pass in quick proto tcp to port { http https }

Is it some well-known problem? Something wrong with synproxy on RELENG_8?

Thanks!