On Sun, Aug 20, 2006 at 05:09:33AM +0200, openbsd misc wrote: > > On 8/19/06, openbsd misc <[EMAIL PROTECTED]> wrote: > >> Hello, > >> > >> nobody has an answer for that? :/ Or was my explanation not english > enough? =) Please let me know if something is ambiguous. > >> > >> Regards > >> Hagen Volpers > >> > > > > Hi, > Hello, > > > I do not know about pf, but maybe I can help anyway. Did you > > investigate why these two states look different? > > all icmp 192.168.122.128:512 -> 193.99.144.85 0:0 > > all icmp 192.168.122.16:512 -> 84.60.163.18:34545 -> 193.99.144.85 0:0 > > That's exacly my question. ;-) These states should not be different, > but they are... > > > Also, have you tried looking at the state table _after_ restarting the > > pings? Does it look the same or different? > > Yes. It looks different (like the other line) if you wait for 10 seconds > (udp timeout) before starting the ping again. > > I think this behavior is not correct (or my pf.conf isn't). I wasn't > able > to figure out why this happens. > > I had these problems on a WRAP system (i386).
This probably is not the problem, but have you checked /etc/rc for the rules loaded by default before /etc/pf.conf is loaded? If something there created state... -- Darrin Chandler | Phoenix BSD Users Group [EMAIL PROTECTED] | http://bsd.phoenix.az.us/ http://www.stilyagin.com/ |
