"Ilya A. Kovalenko" <[EMAIL PROTECTED]> writes: > Thank you very much for comprehensive explanation. I totally miss, > that state entry uses gateway-related direction to match packets. > *reading manuals one more time*
It's a fairly common mistake, but the gateway-centring view is really is the only logical perspective if you think of it. That's why I spend so much time hammering that in during the relatively basic PF tutorial I've been giving. (yes, the one at <http://home.nuug.no/~peter/pf/>). -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
