On 2012-05-22 15:44, Vick Khera wrote:
On Thu, May 17, 2012 at 2:37 PM, Ugo Bellavance<[email protected]>  wrote:

I would like to make sure my rules in the best order.  I understand that the
rules are processed from top to bottom, so I should place the rules that are
most used at top.  However, how long lasts a state?  I just want to know
whether a long stream of data (a backup, for example) between two hosts will
hit the rules more or less than my smtp server, for example (less data, but
more connections).

Once a state is established, the rules are not referenced for that
connection again.  The "check-state" happens pretty close to the top.

I understand, but if, for example, you download an ISO using http, will it remain in one state for the whole transfert?

Thanks,

Ugo

_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to