From owner-freebsd-pf@FreeBSD.ORG Thu Apr 4 18:56:29 2013 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id E84CEB48 for ; Thu, 4 Apr 2013 18:56:29 +0000 (UTC) (envelope-from thomas@gibfest.dk) Received: from mail.tyknet.dk (mail.tyknet.dk [IPv6:2a01:4f8:141:52a3:186::]) by mx1.freebsd.org (Postfix) with ESMTP id ADBC482C for ; Thu, 4 Apr 2013 18:56:29 +0000 (UTC) Received: from [10.10.1.100] (unknown [217.71.4.82]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.tyknet.dk (Postfix) with ESMTPSA id 1D1C711C8FA; Thu, 4 Apr 2013 20:56:20 +0200 (CEST) X-DKIM: OpenDKIM Filter v2.5.2 mail.tyknet.dk 1D1C711C8FA DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=gibfest.dk; s=default; t=1365101781; bh=AZzPEXSHoQqkdWISbt0ySAqMUySBeCO22LypBOD7F/8=; h=Date:From:To:Subject:References:In-Reply-To; b=eaJ6qr+YJ6zgtAj3whgdHNZfdTJ/OJdpYyR+K1aE6zdBWjEDOGdhQb1TA/DCUsRrg gRgltuHwxqPidWftq72XKeOmWpF5JRC7Ezc/Pz3B3MGt5VNVJoH+42rkQY0F//Qfr2 8x8ciTUKcCIAPpb766+DgtAFp8Qu0iLFypVj3mSk= Message-ID: <515DCCD2.3010102@gibfest.dk> Date: Thu, 04 Apr 2013 20:56:18 +0200 From: Thomas Steen Rasmussen User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130328 Thunderbird/17.0.5 MIME-Version: 1.0 To: freebsd-pf@freebsd.org Subject: Re: Filtering bridge with pf. References: <515D8F9D.3080001@innolan.dk> In-Reply-To: <515D8F9D.3080001@innolan.dk> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2013 18:56:30 -0000 On 04-04-2013 16:35, Carsten Sonne Larsen wrote: > > I am using the keyword *quick* and would expect a certain rule match > instead of rule 2..16777216 > It has been like this since FreeBSD 9 I believe, and the situation is the same in the new smp pf from head. I don't know what causes it, but just to let you know it is not related to your specific ruleset. I also use the "quick" keyword on all my rules if that helps. Best regards, Thomas Steen Rasmussen