From owner-freebsd-pf@FreeBSD.ORG Wed Sep 10 16:58:40 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 655FD1065678 for ; Wed, 10 Sep 2008 16:58:40 +0000 (UTC) (envelope-from ddesimone@verio.net) Received: from relay1-bcrtfl2.verio.net (relay1-bcrtfl2.verio.net [131.103.218.142]) by mx1.freebsd.org (Postfix) with ESMTP id 0DCC18FC1C for ; Wed, 10 Sep 2008 16:58:39 +0000 (UTC) (envelope-from ddesimone@verio.net) Received: from iad-wprd-xchw01.corp.verio.net (iad-wprd-xchw01.corp.verio.net [198.87.7.164]) by relay1-bcrtfl2.verio.net (Postfix) with ESMTP id 8106EB0380D7 for ; Wed, 10 Sep 2008 12:58:38 -0400 (EDT) thread-index: AckTZnifSmyL+jyBSpqKGSAOI6vSUw== Received: from limbo.int.dllstx01.us.it.verio.net ([10.10.10.11]) by iad-wprd-xchw01.corp.verio.net with Microsoft SMTPSVC(6.0.3790.1830); Wed, 10 Sep 2008 12:58:38 -0400 Received: by limbo.int.dllstx01.us.it.verio.net (Postfix, from userid 1000) id A18698E29B; Wed, 10 Sep 2008 11:58:32 -0500 (CDT) Date: Wed, 10 Sep 2008 11:58:32 -0500 From: "David DeSimone" Content-Transfer-Encoding: 7bit To: Message-ID: <20080910165831.GC5570@verio.net> Content-Class: urn:content-classes:message Mail-Followup-To: freebsd-pf@freebsd.org Importance: normal Priority: normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992 References: <7731938b0809091615i6a9624fape21e0711cbbde447@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; x-action=pgp-signed; charset="us-ascii" Content-Disposition: inline In-reply-to: <7731938b0809091615i6a9624fape21e0711cbbde447@mail.gmail.com> Precedence: bulk User-Agent: Mutt/1.5.9i X-OriginalArrivalTime: 10 Sep 2008 16:58:38.0733 (UTC) FILETIME=[78940BD0:01C91366] Subject: Re: pf not creating state on cloned local interface (with FreeBSD jail) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Sep 2008 16:58:40 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Peter Maxwell wrote: > > pass in log on lo3 proto tcp from any to any flags S/SA modulate state > pass out log on lo3 proto tcp from any to any flags S/SA modulate state I have heard it mentioned several times on this list (and experienced it myself) that "modulate state" does not work. But I don't really know why it doesn't work, and what behavior you should expect if you attempt to use it. I would suggest you try "keep state" instead, before proceeding further. - -- David DeSimone == Network Admin == fox@verio.net "I don't like spinach, and I'm glad I don't, because if I liked it I'd eat it, and I just hate it." -- Clarence Darrow -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFIx/y3FSrKRjX5eCoRApccAJ492tm3v/SlPBTH0gXduuRZeS857ACeO+/G yfF/1KpNN9H4EmzU49P7SO0= =DH6a -----END PGP SIGNATURE----- This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you.