Date: Thu, 08 Nov 2007 21:18:33 +0100 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Max Laier <max@love2party.net> Cc: freebsd-net@freebsd.org Subject: Re: pf misfeature Message-ID: <86ve8cbiee.fsf@ds4.des.no> In-Reply-To: <200711082043.31664.max@love2party.net> (Max Laier's message of "Thu\, 8 Nov 2007 20\:43\:22 %2B0100") References: <86zlxoblmj.fsf@ds4.des.no> <200711082043.31664.max@love2party.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Max Laier <max@love2party.net> writes:
> On Thursday 08 November 2007, Dag-Erling Sm=C3=B8rgrav wrote:
>> but what you actually get is this:
>>
>> pass on $eth from $lan to $lan flags S/SA keep state
>>
>> which only matches TCP handshakes, so your UDP streams are screwed.
> I don't think this is true.
With "pass on $eth from $lan to $lan", NFS doesn't work. With "pass on
$eth inet proto { tcp, udp } from $lan to $lan", it does.
DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86ve8cbiee.fsf>