Max Laier <[EMAIL PROTECTED]> writes:
> On Thursday 08 November 2007, Dag-Erling Smørgrav wrote:
>> but what you actually get is this:
>>
>>   pass on $eth from $lan to $lan flags S/SA keep state
>>
>> which only matches TCP handshakes, so your UDP streams are screwed.
> I don't think this is true.

With "pass on $eth from $lan to $lan", NFS doesn't work.  With "pass on
$eth inet proto { tcp, udp } from $lan to $lan", it does.

DES
-- 
Dag-Erling Smørgrav - [EMAIL PROTECTED]
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to