From owner-freebsd-pf@FreeBSD.ORG Sat Nov 22 22:36:58 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A4AF21065670 for ; Sat, 22 Nov 2008 22:36:58 +0000 (UTC) (envelope-from cbuechler@gmail.com) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.177]) by mx1.freebsd.org (Postfix) with ESMTP id 786678FC0C for ; Sat, 22 Nov 2008 22:36:58 +0000 (UTC) (envelope-from cbuechler@gmail.com) Received: by wa-out-1112.google.com with SMTP id m34so744269wag.27 for ; Sat, 22 Nov 2008 14:36:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=w3/D3acfcDMuB51nHKDrLgtX0B95HW8Z5N20ujJ/nR8=; b=tTHjTFjG60IxeXbuP9B/8i1L5rBaueZb5Q0gmkZ1W8s2t9rTIj7IoRWyManVRMKV1G eXQaWzbOTTDEhgblsTTEN2cMYJS4QYco/7v+lEVZpZbzkp5FYPPfhpD/77ZhMzNV3PKp UQEwIHHA3FQhLaeTvZ6NMZX0jY6ugNViRAHt0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=jE5M8faE0cqillz5UBl2uSJPdUWkVhvU2NfC8Uk9VmN++u+Ri2zN1KzS0bLv0KSu5D q+/s5NBmO3AuAqdI5qmQ1CgIdgdrWIyCYMID08IdRsgZDB93P7pfB11xkAcfClmZqfGp rWh8W0VqWudTfHHmT0GLux8JuiatDFcNbmaKs= Received: by 10.114.185.8 with SMTP id i8mr1087896waf.85.1227391968734; Sat, 22 Nov 2008 14:12:48 -0800 (PST) Received: by 10.114.201.2 with HTTP; Sat, 22 Nov 2008 14:12:48 -0800 (PST) Message-ID: Date: Sat, 22 Nov 2008 17:12:48 -0500 From: "Chris Buechler" To: darius@dons.net.au, freebsd-pf@freebsd.org In-Reply-To: <200811220225.mAM2Phuj038059@freefall.freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <200811220225.mAM2Phuj038059@freefall.freebsd.org> Cc: Subject: Re: kern/129060: [pf] [tun] pf doesn't forget the old tun IP X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Nov 2008 22:36:58 -0000 On Fri, Nov 21, 2008 at 9:25 PM, wrote: > Old Synopsis: pf doesn't forget the old tun IP > New Synopsis: [pf] [tun] pf doesn't forget the old tun IP > This sounds like the expected behavior, not a bug. You have to kill your states when your WAN IP changes or else traffic will continue to be translated via the existing state. Chris