Max Laier <[EMAIL PROTECTED]> writes: > On Thursday 08 November 2007, Dag-Erling Smørgrav wrote: >> but what you actually get is this: >> >> pass on $eth from $lan to $lan flags S/SA keep state >> >> which only matches TCP handshakes, so your UDP streams are screwed. > I don't think this is true.
With "pass on $eth from $lan to $lan", NFS doesn't work. With "pass on $eth inet proto { tcp, udp } from $lan to $lan", it does. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"