From owner-freebsd-stable@FreeBSD.ORG Thu Jun 8 22:26:33 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1405316A60C for ; Thu, 8 Jun 2006 22:26:33 +0000 (UTC) (envelope-from kian.mohageri@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.188]) by mx1.FreeBSD.org (Postfix) with ESMTP id F3BD243D5A for ; Thu, 8 Jun 2006 22:26:26 +0000 (GMT) (envelope-from kian.mohageri@gmail.com) Received: by nf-out-0910.google.com with SMTP id g2so491285nfe for ; Thu, 08 Jun 2006 15:26:25 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=Ab/I/c9V6F+MDKue3sbJ24illISyw97x9FcKMbbtHnsjwirLZvZU4TV/B0mUFtnPZMZOcst3bHvB1dkpdhTJGqKZUKIxCpno4MF0CUWRTc1T1Lu9T2R7xG/6MJOT3eSc0A9hWEltWhK+oNqXLW44YpPILlKtGqK4u2FRAmskLHY= Received: by 10.49.59.2 with SMTP id m2mr1836024nfk; Thu, 08 Jun 2006 15:26:25 -0700 (PDT) Received: by 10.48.108.17 with HTTP; Thu, 8 Jun 2006 15:26:25 -0700 (PDT) Message-ID: Date: Thu, 8 Jun 2006 15:26:25 -0700 From: "Kian Mohageri" To: "Daniel Eriksson" In-Reply-To: <4F9C9299A10AE74E89EA580D14AA10A605F5BA@royal64.emp.zapto.org> MIME-Version: 1.0 References: <4F9C9299A10AE74E89EA580D14AA10A605F5BA@royal64.emp.zapto.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-stable@freebsd.org Subject: Re: pf buggy on 6.1-STABLE? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Jun 2006 22:26:33 -0000 I'm aware. I meant that as "pass quick" (without any keep state) ;) Kian On 6/8/06, Daniel Eriksson wrote: > > Kian Mohageri wrote: > > > 'pass quick' (non-stateful) fixed the problems but I wasn't > > satisfied with that for obvious reasons. > > The 'quick' keyword does not make the rule non-stateful, it only aborts > further evaluation of the specific packet. > > See http://www.openbsd.org/faq/pf/filter.html#quick for more > information. > > /Daniel Eriksson >