> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Melinda Taylor
> pass in quick on hme0 proto udp from any port = 177 to 129.94.163.184/32 > pass out quick on hme0 proto udp from any to 129.94.163.184/32 port = 177 > pass in on hme0 proto udp from 129.94.163.0/32 to any > I watched with ipfstat -t while I was fiddling with all this and the only > connections I could see were my ssh ones. > Even when it was showing up on the chooser I couldn't see any other > connections to ports on my machine. ipfstat -t only shows connections which have been entered into the state table. I believe that would mean only connections which have "keep state" rules associated with them. Thus rules like the examples above, which only used interface, protocol, address and port to decide, and do not depend on state, won't ever show up there. At least I think I've got that figured out correctly. I was confused by that, too.
