On Fri, Jul 18, 2008 at 6:03 AM, Rudi Kramer - MWEB <[EMAIL PROTECTED]> wrote: > > I had the same issue and when I checked with our ms-admin team they said > it was a Microsoft limitation. >
No, it's an issue with many NAT implementations and how they handle state for the GRE protocol. pf only tracks source IP, dest IP and protocol. It has to do something more advanced, like tracking by GRE call ID in addition to src/dst, to track connections in this manner. Chris _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"
