From owner-freebsd-pf@FreeBSD.ORG Thu Feb 28 15:33:10 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 12A181065673 for ; Thu, 28 Feb 2008 15:33:10 +0000 (UTC) (envelope-from kian.mohageri@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.227]) by mx1.freebsd.org (Postfix) with ESMTP id B62808FC1C for ; Thu, 28 Feb 2008 15:33:09 +0000 (UTC) (envelope-from kian.mohageri@gmail.com) Received: by wx-out-0506.google.com with SMTP id i29so3778642wxd.7 for ; Thu, 28 Feb 2008 07:33:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=Xzs4wAC1JFtf5aiJ87oQ03gXHLgauh9mEkt9SQ1P4tk=; b=OC+ZIP+kg0A60MZF0i0lS1wAJ1zuL4NkphDTkb+JNmrwLpftfjDcpmSwY9jUZoRDw4po0RkaCEAeWRblYhsio1pXoogdEw1bvhD1M/4P0w5bnJaiVASCgfZ7kdRqzrgfLfN1Lmj87m027c2QWLuZz/z2jLnNCgHSePgbqKWpD1o= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=QkvdRh18A+lXSfcBsZmx6e31tO8L1sDIC011bd+uzMU9TXlDM41ZPKvnoSRO8oT4wDpyv/JWcD2HSwOjJIvu/DzeZzvl8gbeFhqpBnbFHQVbLQok6xxNQlXS0BFBUeRLmLNyd1vHrYX6RaDhKxHdblh/B8yJlTW438C703DLoBM= Received: by 10.65.115.4 with SMTP id s4mr14906237qbm.1.1204212787426; Thu, 28 Feb 2008 07:33:07 -0800 (PST) Received: by 10.65.116.4 with HTTP; Thu, 28 Feb 2008 07:33:07 -0800 (PST) Message-ID: Date: Thu, 28 Feb 2008 07:33:07 -0800 From: "Kian Mohageri" To: "Vadym Chepkov" In-Reply-To: <002701c87a1c$51a9bad0$050a0a0a@chepkov.lan> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <1635d77d0802271143u2aeb0b13we310ea1a611afaa8@mail.gmail.com> <6e6841490802271310o3e5976a4gef2cb507087c01b@mail.gmail.com> <1635d77d0802271346g4cf02b8et8bc74d16f6e97e45@mail.gmail.com> <1635d77d0802272002w6aaaa0ect164a64e136b969f5@mail.gmail.com> <002701c87a1c$51a9bad0$050a0a0a@chepkov.lan> Cc: freebsd-pf@freebsd.org Subject: Re: floating keep state X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Feb 2008 15:33:10 -0000 On Thu, Feb 28, 2008 at 7:12 AM, Vadym Chepkov wrote: > It was not my intention to argue with anybody, I was trying to understand > why the packet was blocked and reply to Daniel got bounced, so I posted it > in the distro. I got it now, IN packet state doesn't match IN packets, only > OUT. Thank you. > Glad that made sense. http://undeadly.org/cgi?action=article&sid=20060928081238 Daniel's article from a while back explains it all really well (see "Debugging states"). The 2 other articles in that series are equally good. Highly recommended. -Kian