From owner-freebsd-pf@FreeBSD.ORG  Mon Sep 22 12:27:58 2008
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BCDB31065684
	for <freebsd-pf@freebsd.org>; Mon, 22 Sep 2008 12:27:58 +0000 (UTC)
	(envelope-from jille@quis.cx)
Received: from smtpout1.ru.nl (smtpout1.ru.nl [131.174.66.174])
	by mx1.freebsd.org (Postfix) with ESMTP id 819978FC1F
	for <freebsd-pf@freebsd.org>; Mon, 22 Sep 2008 12:27:58 +0000 (UTC)
	(envelope-from jille@quis.cx)
X-Virus-Scanned: by AMaViS & ClamAV
Received: from [131.174.12.166] (tk023pc36.science.ru.nl [131.174.12.166])
	by smtp.ru.nl (Postfix) with ESMTP id AD073A12F9;
	Mon, 22 Sep 2008 13:57:43 +0200 (CEST)
Message-ID: <48D78839.2020106@quis.cx>
Date: Mon, 22 Sep 2008 13:57:45 +0200
From: Jille Timmermans <jille@quis.cx>
User-Agent: Thunderbird 2.0.0.16 (X11/20080723)
MIME-Version: 1.0
To: Leslie Jensen <leslie@eskk.nu>
References: <48D7873C.70903@eskk.nu>
In-Reply-To: <48D7873C.70903@eskk.nu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-pf@freebsd.org
Subject: Re: Explanation of macro
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Sep 2008 12:27:58 -0000

Leslie Jensen wrote:
> I'm setting up a pf firewall and came across this macro
>
> SYN_ONLY="S/FSRA"
This means it will only match packets which have only set the SYN flag 
of FIN, SYN, RST and ACK.
This is the case when starting a new (tcp) connection.

-- Jille
>
> Have tried to find out what it does but have not been successful.
>
> Will someone explain Please?
> Thanks
> /Leslie
>
>
>
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"