Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 May 2009 11:14:23 +0200
From:      Maciej Milewski <milu@dat.pl>
To:        freebsd-pf@freebsd.org
Cc:        ysidhu@ucolick.org
Subject:   Re: Testing new firewall to replace operational firewall
Message-ID:  <200905181114.24507.milu@dat.pl>
In-Reply-To: <ec5d34680905172320r60aef0a6r3b37d0ace7cdec94@mail.gmail.com>
References:  <ec5d34680905172320r60aef0a6r3b37d0ace7cdec94@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Monday 18 May 2009 08:20:40 mehma sarja napisa=B3(a):
> SECOND
> Are the "flags S/SA" altq functions? Because, as I said before, the new
> firewall is FreeBSD GENERIC kernel with altq not compiled in.
No, they aren't as far as I know. Altq is a mechanism using for=20
queuing/traffic shaping. If you don't compile it it just can't be used. For=
=20
more info please look at PF FAQ or pf manual.

S/SA is from flags and means SYN and ACK.=20
Handbook says "FreeBSD 7.X -- PF is at OpenBSD 4.1" So this option (flags=20
S/SA) is set by default. If you omit it in config it will be set.

=20
Best Regards,
Maciej Milewski



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200905181114.24507.milu>