On 2008-11-24, Damian Higgins <[EMAIL PROTECTED]> wrote: > However, I did try to apply the queue designation on em1 interface > with the statement "pass out quick on em1 from 86.55.8.30 flags any > queue ftp" but got the same result. Nothing got matched. I'll paste > the outputs tomorrow because I don't have access to that particular > machine right now.
try just "pass log all" and "tcpdump -nettipflog0". it will show the interface and direction of all the packets which create state. nice and easy to convert this to rules which will get matched.