I upgraded my webserver on March 9 from the post 4.5-RELASE stable.  Today 
I've been noticing very unusal access issues on the box.  For example, I 
could not get to my webserver from one remote box using https.  I had to 
change my rules before it would work:

Here is the after and before.  I had to replace the keep state with two 
rules (a.c.b.d is the IP address in question):

< pass in  quick proto tcp from a.b.c.d/32  to any port = https
< pass out quick proto tcp from any to a.b.c.d/32  port = https
---
> pass in quick proto tcp from a.b.c.d/32  to any port = https flags S keep state

Anyone else seeing similar problems?  FWIW, the problem started at about 
1:01AM EST today.

It's a stretch to associate a keep state problem which appears 5 days 
after an upgrade with a possible -STABLE issue.
-- 
Dan Langille
The FreeBSD Diary - http://freebsddiary.org/ - practical examples


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message

Reply via email to