openbsd 4.1 and keep state

[jacek]

Hi all,

I have quick question , i need not to create state on one of the rule but
once is done by default starting with verison 4.1 , not sure how to do it.

Any tips welcome

Thanku you
Jacek

Re: openbsd 4.1 and keep state

[Marius ROMAN]

On 6/28/07, jacek [EMAIL PROTECTED] wrote:

Hi all,

I have quick question , i need not to create state on one of the rule but
once is done by default starting with verison 4.1 , not sure how to do it.

Any tips welcome

Thanku you
Jacek



Read :

http://www.openbsd.org/faq/pf/filter.html#stateopts
http://www.undeadly.org/cgi?action=articlesid=20070424020008

Marius
--
[EMAIL PROTECTED], joy2share.com, vrajamarii.net, ispot.ro}

Re: openbsd 4.1 and keep state

[Cabillot Julien]

http://openbsd.org/faq/pf/filter.html#stateopts

no state
   Prevents the rule from automatically creating a state entry.

On 6/28/07, jacek [EMAIL PROTECTED] wrote:

Hi all,

I have quick question , i need not to create state on one of the rule but
once is done by default starting with verison 4.1 , not sure how to do it.

Any tips welcome

Thanku you
Jacek





--
Julien Cabillot

Re: openbsd 4.1 and keep state

[Huzeyfe ONAL]

Use no state  in your rule.
jacek wrote:
 Hi all,

 I have quick question , i need not to create state on one of the rule but
 once is done by default starting with verison 4.1 , not sure how to do it.

 Any tips welcome

 Thanku you
 Jacek

Re: openbsd 4.1 and keep state

[Stuart Henderson]

On 2007/06/28 15:45, Huzeyfe ONAL wrote:
 Use no state  in your rule.

and 'flags any' if it's TCP.

Re: openbsd 4.1 and keep state

[Ryan McBride]

On Thu, Jun 28, 2007 at 02:56:33PM +0100, Stuart Henderson wrote:
 On 2007/06/28 15:45, Huzeyfe ONAL wrote:
  Use no state  in your rule.
 
 and 'flags any' if it's TCP.

You can set this explicitly if you'd like, but it's not necessary:
pfctl only applies 'flags S/SA' by default if the rule is stateful.