Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Apr 2008 21:17:07 -0700
From:      "Kian Mohageri" <kian.mohageri@gmail.com>
To:        "Mark Pagulayan" <m.pagulayan@auckland.ac.nz>
Cc:        Diego Salvador <salvador_d13@yahoo.com.ph>, fox@verio.net, freebsd-pf@freebsd.org
Subject:   Re: PF and State Table
Message-ID:  <fee88ee40804022117w6d13d002t2d4d75969517c285@mail.gmail.com>
In-Reply-To: <C65291A68BAF57499B18564A1EE4A7612ECBF8@UXCHANGE1.UoA.auckland.ac.nz>
References:  <684548.87924.qm@web57414.mail.re1.yahoo.com> <C65291A68BAF57499B18564A1EE4A7612ECBF8@UXCHANGE1.UoA.auckland.ac.nz>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 2, 2008 at 1:33 PM, Mark Pagulayan
<m.pagulayan@auckland.ac.nz> wrote:
> Hi,
>
>  What pf version are you using? Correct me if I am wrong guys, on PF4.1
>  which a the release version of pf on freebsd 7.0 when you specify keep
>  state the flag S/A is implied?
>

Correct, and if you leave out 'keep state' entirely, it will apply
'flags S/SA keep state'

e.g.,

kian@alvis:~
> cat pf.conf
pass on em0

kian@alvis:~
> pfctl -vnf pf.conf
pass on em0 all flags S/SA keep state

-Kian



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fee88ee40804022117w6d13d002t2d4d75969517c285>