From owner-freebsd-questions@FreeBSD.ORG  Fri Feb 23 02:36:13 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 0004C16A401
	for <freebsd-questions@freebsd.org>;
	Fri, 23 Feb 2007 02:36:12 +0000 (UTC)
	(envelope-from fbsd06@mlists.homeunix.com)
Received: from mxout-03.mxes.net (mxout-03.mxes.net [216.86.168.178])
	by mx1.freebsd.org (Postfix) with ESMTP id CE0A613C461
	for <freebsd-questions@freebsd.org>;
	Fri, 23 Feb 2007 02:36:12 +0000 (UTC)
	(envelope-from fbsd06@mlists.homeunix.com)
Received: from gumby.homeunix.com (unknown [87.81.140.128])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by smtp.mxes.net (Postfix) with ESMTP id 67D8A51931
	for <freebsd-questions@freebsd.org>;
	Thu, 22 Feb 2007 21:36:10 -0500 (EST)
Date: Fri, 23 Feb 2007 02:36:06 +0000
From: RW <fbsd06@mlists.homeunix.com>
To: freebsd-questions@freebsd.org
Message-ID: <20070223023606.13be5e5e@gumby.homeunix.com>
In-Reply-To: <19861fba0702221445r3124eecbq852d774d0ed4e479@mail.gmail.com>
References: <200702202021.55723.pablo.fernandez@rs.com.ar>
	<19861fba0702211038p3144271ey1e30cf67311678ef@mail.gmail.com>
	<20070222143030.0b858e86@gumby.homeunix.com>
	<19861fba0702221445r3124eecbq852d774d0ed4e479@mail.gmail.com>
X-Mailer: Claws Mail 2.7.2 (GTK+ 2.10.9; i386-portbld-freebsd6.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Re: PF slowing down file copies
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Feb 2007 02:36:13 -0000

On Thu, 22 Feb 2007 23:45:06 +0100
J65nko <j65nko@gmail.com> wrote:

> On 2/22/07, RW <fbsd06@mlists.homeunix.com> wrote:
> > On Wed, 21 Feb 2007 19:38:39 +0100
> > J65nko <j65nko@gmail.com> wrote:
> >
> > > For keeping state on TCP connections you should only create state
> > > on the first packet of the 3 way TCP handshake. Using "flags
> > > S/SA" will ensure this. This will prevent problems with TCP
> > > windows scaling..
> >
> > Why? Creating a state entry causes subsequent packets, in the same
> > tcp connection, to bypass the rules altogether.
> >
> 
> The OP did not keep state on TCP connections using "flags S/SA". That
> can cause problems for  TCP window scaling (defined in RFC 1323)  and
> result in stalling connections.
> 
> >From http://undeadly.org/cgi?action=article&sid=20060928081238 under
> "Create TCP states on the initial SYN packet"
> 

How can a TCP connection start with anything other than an initial SYN
packet?