Date: Sun, 07 Sep 2008 17:02:40 +0200 From: Remko Lodder <remko@FreeBSD.org> To: Yar Tikhiy <yar@comp.chem.msu.su> Cc: freebsd-pf@freebsd.org Subject: Re: pf creating states by default now? Message-ID: <48C3ED10.7080601@FreeBSD.org> In-Reply-To: <A676B431-7DBD-49BA-AE4C-54786FB4833D@comp.chem.msu.su> References: <A676B431-7DBD-49BA-AE4C-54786FB4833D@comp.chem.msu.su>
next in thread | previous in thread | raw e-mail | index | archive | help
Yar Tikhiy wrote: > > > Looks like pfctl or pf itself added stateful semantics to my pf.conf > that weren't there initially. Is this effect intended and, if so, how > can I tell pf not to create states from certain rules? > > Thanks! And excuse me if I'm just missing something. > > Yar > Hi Yar, Yes since 7.0 this behaviour is intented. flags S/SA and keep state are implied now. If you do not want to use them you set ''no state'' to get rid of the statefull filter. I think that also grabs the flags S/SA because that tells you when the statefull filter is being setup. Hope this helps, remko -- /"\ Best regards, | remko@FreeBSD.org \ / Remko Lodder | remko@EFnet X http://www.evilcoder.org/ | / \ ASCII Ribbon Campaign | Against HTML Mail and News
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48C3ED10.7080601>