Date: Thu, 14 Mar 2002 11:47:21 -0500 From: "Dan Langille" <dan@langille.org> To: freebsd-stable@FreeBSD.ORG Subject: ipfilter keep state broken? Message-ID: <20020314164723.4E1543F0E@bast.unixathome.org>
next in thread | raw e-mail | index | archive | help
I upgraded my webserver on March 9 from the post 4.5-RELASE stable. Today I've been noticing very unusal access issues on the box. For example, I could not get to my webserver from one remote box using https. I had to change my rules before it would work: Here is the after and before. I had to replace the keep state with two rules (a.c.b.d is the IP address in question): < pass in quick proto tcp from a.b.c.d/32 to any port = https < pass out quick proto tcp from any to a.b.c.d/32 port = https --- > pass in quick proto tcp from a.b.c.d/32 to any port = https flags S keep state Anyone else seeing similar problems? FWIW, the problem started at about 1:01AM EST today. It's a stretch to associate a keep state problem which appears 5 days after an upgrade with a possible -STABLE issue. -- Dan Langille The FreeBSD Diary - http://freebsddiary.org/ - practical examples To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020314164723.4E1543F0E>