Re: IPFW Stateful behaviour

2007-04-03 Thread Prokofiev S.P.
Hi! I want both staff nets to have internet access and another my networks by dynamic rules (i.e. connections initialized by staff[12]), and to be isolated from any: inet (if-default) and networks on this router interfaces with varios stateless and stateful rules. I have drawn the simplified

Re: IPFW Stateful behaviour

2007-04-03 Thread Andrew Pantyukhin
On 4/3/07, Prokofiev S.P. <[EMAIL PROTECTED]> wrote: Hi ALL! The PF has useful state-policy option: if-bound, group-bound, floating. I have found out IPFW stateful rules do not become attached to the interface and behave as PF stateful rules in floating mode. For example, I build stateful rules

IPFW Stateful behaviour

2007-04-03 Thread Prokofiev S.P.
Hi ALL! The PF has useful state-policy option: if-bound, group-bound, floating. I have found out IPFW stateful rules do not become attached to the interface and behave as PF stateful rules in floating mode. For example, I build stateful rules (29991,31991) on two interfaces for two different ne