On Thu, 9 Dec 2004, Darren Reed wrote:
If you excuse my confusion, in 4.x, "keep state" may fail for certain packet types where it plainly makes no sense - e.g. ICMP replies - and that failure will cause the packet to be blocked, despite the rule being a "pass" rule.
I can see how this is driven by my overly broad rule.
Cheers Dazza.
