From owner-freebsd-pf@freebsd.org  Wed Jun  8 13:08:45 2016
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id DC1FEB6EFD9
 for <freebsd-pf@mailman.ysv.freebsd.org>; Wed,  8 Jun 2016 13:08:45 +0000 (UTC)
 (envelope-from maximos@als.nnov.ru)
Received: from mx.als.nnov.ru (mx.als.nnov.ru [95.79.102.161])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id A0D5616AD
 for <freebsd-pf@freebsd.org>; Wed,  8 Jun 2016 13:08:45 +0000 (UTC)
 (envelope-from maximos@als.nnov.ru)
Received: from [10.4.1.100]
 by mx.als.nnov.ru with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
 (Exim 4.86_2 (FreeBSD)) (envelope-from <maximos@als.nnov.ru>)
 id 1bAcsS-0006bG-C9
 for freebsd-pf@freebsd.org; Wed, 08 Jun 2016 15:46:32 +0300
Subject: Re: cannot delete state, when the state is obviously present
To: freebsd-pf@freebsd.org
References: <5757F7D4.2030405@norma.perm.ru>
From: Max <maximos@als.nnov.ru>
Message-ID: <6906ba6c-832b-2e19-b970-4b19b8a45da1@als.nnov.ru>
Date: Wed, 8 Jun 2016 15:46:32 +0300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <5757F7D4.2030405@norma.perm.ru>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Jun 2016 13:08:46 -0000

Hello, Eugene.

Can you show the output of "pfctl -vvss" before and after "pfctl -k id 
-k ..."?
>     age 00:00:20, expires in *00:00:05*


08.06.2016 13:47, Eugene M. Zheganin пишет:
> Hi.
>
> Why it's often impossible to delete state from state table ?
>
> Suppose I have a state:
>
> all icmp 46.146.220.88:36386 <- 104.81.60.125:36386       0:0
>     age 00:00:20, expires in 00:00:05, 2:2 pkts, 128:128 bytes, rule 43
>     id: 0100000073bcdded creatorid: 1017b0dc
>
> # pfctl -k id -k 0100000073bcdded
> killed 0 states
>
> And the state is still present after this.
>
> Thanks.
> Eugene.
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"