From owner-freebsd-pf@FreeBSD.ORG Wed Feb 28 20:27:04 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 87BA016A403 for ; Wed, 28 Feb 2007 20:27:04 +0000 (UTC) (envelope-from Greg.Hennessy@nviz.net) Received: from smtp.nildram.co.uk (smtp.nildram.co.uk [195.112.4.54]) by mx1.freebsd.org (Postfix) with ESMTP id 4DF8513C48E for ; Wed, 28 Feb 2007 20:27:04 +0000 (UTC) (envelope-from Greg.Hennessy@nviz.net) Received: from gw2.local.net (unknown [62.3.210.251]) by smtp.nildram.co.uk (Postfix) with ESMTP id 5DD522BACC9 for ; Wed, 28 Feb 2007 20:26:59 +0000 (GMT) From: "Greg Hennessy" To: "'Eduardo Meyer'" , References: In-Reply-To: Date: Wed, 28 Feb 2007 20:26:53 -0000 Message-ID: <000f01c75b76$c8c34f20$5a49ed60$@Hennessy@nviz.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcdbbxEdkpZw+sMdTA6EXw7HVCd8/QAB3eeA Content-Language: en-gb x-cr-hashedpuzzle: CCYs CIbg Cxa1 EdBf Esa1 EtWE F5em H90K LxGl QbE2 Qmk7 Qt+7 Rfu+ SPeq TvWn UG8a; 2; ZAB1AGQAdQAuAG0AZQB5AGUAcgBAAGcAbQBhAGkAbAAuAGMAbwBtADsAZgByAGUAZQBiAHMAZAAtAHAAZgBAAGYAcgBlAGUAYgBzAGQALgBvAHIAZwA=; Sosha1_v1; 7; {E858EEBD-E925-4E43-B611-C9A0CF070CC0}; ZwByAGUAZwAuAGgAZQBuAG4AZQBzAHMAeQBAAG4AdgBpAHoALgBuAGUAdAA=; Wed, 28 Feb 2007 20:26:48 GMT; UgBFADoAIABmAGwAYQBnAHMAIAB0AGMAcAAgAGEAbgBkACAAYQBiAHMAYwBlAG4AYwBlACAAbwBmACAAZgBsAGEAZwA= x-cr-puzzleid: {E858EEBD-E925-4E43-B611-C9A0CF070CC0} X-Antivirus: avast! (VPS 000719-0, 28/02/2007), Outbound message X-Antivirus-Status: Clean Cc: Subject: RE: flags tcp and abscence of flag X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2007 20:27:04 -0000 > > Can someone please convert this simple ipfw rule to of? > Judicious use of 'scrub' will take nuke most if not all invalidly flagged packets. greg