-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jeremy Chadwick <[EMAIL PROTECTED]> wrote:
>
> > # pfctl -k 78.107.71.38
> > killed 1 states from 1 sources and 0 destinations
> > # pfctl -s state|grep 78.107.71.38
> > all udp 195.14.50.21:53 -> 78.107.71.38:42859 MULTIPLE:MULTIPLE
> Hmm, it appears that even with the "block" rule in place, and all
> previous state table entries flushed, the packet is somehow making it
> through.
I know my reading comprehension on this thread hasn't been very good,
but I'm going to try again.
pfctl -k did kill a state, but it appears that a reply packet from
195.14.50.21 recreated a state entry, probably just bad timing. You
should try killing the state again, perhaps with
pfctl -k 195.14.50.21 -k 78.107.71.38
And maybe before that, add an extra block rule in the opposite direction
to block replies, at least temporarily just to stop these state entries
from being recreated.
- --
David DeSimone == Network Admin == [EMAIL PROTECTED]
"I don't like spinach, and I'm glad I don't, because if I
liked it I'd eat it, and I just hate it." -- Clarence Darrow
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFIxqXFFSrKRjX5eCoRAqPGAJ9NuZHrFuridRMSDmLOIQlld0VfIACfX9Hx
b5woCHBRpAu2wouD84vXqB8=
=Pmof
-----END PGP SIGNATURE-----
This email message is intended for the use of the person to whom it has been
sent, and may contain information that is confidential or legally protected. If
you are not the intended recipient or have received this message in error, you
are not authorized to copy, distribute, or otherwise use this message or its
attachments. Please notify the sender immediately by return e-mail and
permanently delete this message and any attachments. Verio, Inc. makes no
warranty that this email is error or virus free. Thank you.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
