From owner-freebsd-questions@FreeBSD.ORG Wed Nov 30 12:52:22 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9DF4216A41F for ; Wed, 30 Nov 2005 12:52:22 +0000 (GMT) (envelope-from willmaier@ml1.net) Received: from out4.smtp.messagingengine.com (out4.smtp.messagingengine.com [66.111.4.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id B7E1343D7E for ; Wed, 30 Nov 2005 12:52:18 +0000 (GMT) (envelope-from willmaier@ml1.net) Received: from frontend1.internal (mysql-sessions.internal [10.202.2.149]) by frontend1.messagingengine.com (Postfix) with ESMTP id 28961D19EA4 for ; Wed, 30 Nov 2005 07:52:17 -0500 (EST) Received: from frontend2.messagingengine.com ([10.202.2.151]) by frontend1.internal (MEProxy); Wed, 30 Nov 2005 07:52:17 -0500 X-Sasl-enc: q+MuqkORZrLiEDrnGweNSjtywpmcnBK2+ALWZwlwBzVY 1133355136 Received: from localhost (mdsnwikwbas08-pool4-a199.mdsnwikw.tds.net [69.129.195.199]) by frontend2.messagingengine.com (Postfix) with ESMTP id 465BB57146F for ; Wed, 30 Nov 2005 07:52:15 -0500 (EST) Date: Wed, 30 Nov 2005 06:52:25 -0600 From: Will Maier To: freebsd-questions@freebsd.org Message-ID: <20051130125225.GJ27673@merkur.atekomi.net> Mail-Followup-To: freebsd-questions@freebsd.org References: <60336.192.168.3.69.1133319528.squirrel@webmail.proficuous.com> <438D1894.90500@mac.com> <63871.192.168.3.69.1133320948.squirrel@webmail.proficuous.com> <438D1D95.7010503@mac.com> <65229.192.168.3.69.1133323019.squirrel@webmail.proficuous.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <65229.192.168.3.69.1133323019.squirrel@webmail.proficuous.com> User-Agent: Mutt/1.5.9i Subject: Re: pf blocking nfs X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2005 12:52:22 -0000 On Tue, Nov 29, 2005 at 09:56:59PM -0600, Aaron P. Martinez wrote: > > Aaron P. Martinez wrote: [...] > I realize i could just accept all udp packets from the NFS server or even > just ports 2049, but the underlying question is, why isn't my "keep state" > rule handling this. I don't use pf (or NFS), but UDP is a stateless protocol. I wouldn't be surprised if pf couldn't keep track of its state... -- o--------------------------{ Will Maier }--------------------------o | jabber:..wcmaier@jabber.ccc.de | email:..........wcmaier@ml1.net | | \.........wcmaier@cae.wisc.edu | \..........wcmaier@cae.wisc.edu | *------------------[ BSD Unix: Live Free or Die ]------------------*