From owner-freebsd-pf@FreeBSD.ORG  Thu Apr  3 04:17:09 2008
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 550C1106564A
	for <freebsd-pf@freebsd.org>; Thu,  3 Apr 2008 04:17:09 +0000 (UTC)
	(envelope-from kian.mohageri@gmail.com)
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.181])
	by mx1.freebsd.org (Postfix) with ESMTP id 0D3398FC23
	for <freebsd-pf@freebsd.org>; Thu,  3 Apr 2008 04:17:08 +0000 (UTC)
	(envelope-from kian.mohageri@gmail.com)
Received: by py-out-1112.google.com with SMTP id u52so4246854pyb.10
	for <freebsd-pf@freebsd.org>; Wed, 02 Apr 2008 21:17:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	bh=mZsPDlgsIrWyBgLc5ffWb94ni1IRoXPF87AfPtp9+ZM=;
	b=BEJbfUrLefamH+hmB7UtqLGZ6hDiMFZ1T//C1xs+3+O5jUmsmQrGevisVAKer4SjjmI2AgSllISLTY+WSm9Sl+CVMxENE8aKR0+vcRjTyyX/wc/Hf3zC2L8W6EE8Dp68ew+Or90GL284M2erL0JD6zcCmKj3EsygpGluJAzF4oI=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=q7DVEuC4pjqscjKTiwGvVH6CNBEvlaJm1ep9vayBWgoI2+8v2rYoNtfLaWzFF8+vSHsPnKh8ZXigbSevY2pQ6CHwbjS9QVTpfIFyQElBTWrzgR0UOBPsXv6oC6NyGhqu008Jq/WZHywFOIiJEPdQoDASJnuqi6Bh5oEbaUWg6Ks=
Received: by 10.65.242.7 with SMTP id u7mr21730981qbr.59.1207196227987;
	Wed, 02 Apr 2008 21:17:07 -0700 (PDT)
Received: by 10.65.116.4 with HTTP; Wed, 2 Apr 2008 21:17:07 -0700 (PDT)
Message-ID: <fee88ee40804022117w6d13d002t2d4d75969517c285@mail.gmail.com>
Date: Wed, 2 Apr 2008 21:17:07 -0700
From: "Kian Mohageri" <kian.mohageri@gmail.com>
To: "Mark Pagulayan" <m.pagulayan@auckland.ac.nz>
In-Reply-To: <C65291A68BAF57499B18564A1EE4A7612ECBF8@UXCHANGE1.UoA.auckland.ac.nz>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <684548.87924.qm@web57414.mail.re1.yahoo.com>
	<C65291A68BAF57499B18564A1EE4A7612ECBF8@UXCHANGE1.UoA.auckland.ac.nz>
Cc: Diego Salvador <salvador_d13@yahoo.com.ph>, fox@verio.net,
	freebsd-pf@freebsd.org
Subject: Re: PF and State Table
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Apr 2008 04:17:09 -0000

On Wed, Apr 2, 2008 at 1:33 PM, Mark Pagulayan
<m.pagulayan@auckland.ac.nz> wrote:
> Hi,
>
>  What pf version are you using? Correct me if I am wrong guys, on PF4.1
>  which a the release version of pf on freebsd 7.0 when you specify keep
>  state the flag S/A is implied?
>

Correct, and if you leave out 'keep state' entirely, it will apply
'flags S/SA keep state'

e.g.,

kian@alvis:~
> cat pf.conf
pass on em0

kian@alvis:~
> pfctl -vnf pf.conf
pass on em0 all flags S/SA keep state

-Kian