Hi List,

I am using authpf to grant users access to a special part of our network. The
same firewall doing this is also used for other network separation and
internet access.

If my observation and understanding of the manual page are correct, authpf
kills all states that correspond to the user_ip. For my setup that means, it
also kills connections to other parts of the network which have not been
created through authpf rules.

The documentation reads:

On session exit the same rules and table entries
that were added at startup are removed, and all states associated with
the client's IP address are purged.

Is it possible to configure authpf, so that it only kills states which have
been created through authpf rules? If not, could this feature be decided for
future versions?

Kind regards,

Christian

Reply via email to