Re: PF rule evaluation

2008-08-25 Thread Jason McIntyre
On Mon, Aug 25, 2008 at 03:19:17PM +1000, Mikel Lindsaar wrote: Thanks for your answer. That mostly answers it. Might be a good thing to modify the man page on the quick keyword... So instead of this in pf.conf(5): quick If a packet matches a rule which has the quick

Re: PF rule evaluation

2008-08-25 Thread Almir Karic
On Mon, Aug 25, 2008 at 11:05:38AM +1000, Mikel Lindsaar wrote: Hello list, I have purchased and read the book of PF (good book by the way) as well as the man pages, and I have a question that I have not been able to find a definitive answer on: Does PF only evaluate every packet against

PF rule evaluation

2008-08-24 Thread Mikel Lindsaar
Hello list, I have purchased and read the book of PF (good book by the way) as well as the man pages, and I have a question that I have not been able to find a definitive answer on: Does PF only evaluate every packet against the ruleset once on all interfaces, or does it evaluate once for each

Re: PF rule evaluation

2008-08-24 Thread Aaron Stellman
On Mon, Aug 25, 2008 at 11:05:38AM +1000, Mikel Lindsaar wrote: Hello list, I have purchased and read the book of PF (good book by the way) as well as the man pages, and I have a question that I have not been able to find a definitive answer on: Does PF only evaluate every packet against

Re: PF rule evaluation

2008-08-24 Thread Peter N. M. Hansteen
Mikel Lindsaar [EMAIL PROTECTED] writes: I have purchased and read the book of PF (good book by the way) as Thanks! :) What I mean is, does a matching pass quick rule on one interface (say $int_if) then also guarantee egress on another interface that has a block rule? No. If rules that

Re: PF rule evaluation

2008-08-24 Thread Mikel Lindsaar
On Mon, Aug 25, 2008 at 11:33 AM, Aaron Stellman [EMAIL PROTECTED] wrote: On Mon, Aug 25, 2008 at 11:05:38AM +1000, Mikel Lindsaar wrote: I have purchased and read the book of PF (good book by the way) as well as the man pages, and I have a question that I have not been able to find a