Re: SOLVED - Re: PF issue (rule match but rule fails)

2012-02-28 Thread csbender
You rock dude. Please to be part of this community! - Original Message From: Damien Fleuriot To: Chris Bender Cc: "freebsd-pf@freebsd.org" Sent: Tue, February 28, 2012 7:24:07 PM Subject: SOLVED - Re: PF issue (rule match but rule fails) Glad to hear that worked ;) On 28 Feb 2012,

SOLVED - Re: PF issue (rule match but rule fails)

2012-02-28 Thread Damien Fleuriot
Glad to hear that worked ;) On 28 Feb 2012, at 18:57, Chris Bender wrote: > Dude that was great it worked, I only changed the modulate to keep to work. > > Thanks > > Sent from my iPhone > > On Feb 28, 2012, at 10:17 AM, Damien Fleuriot wrote: > >> Regarding your rule #12, I confirm it is

Re: PF issue (rule match but rule fails)

2012-02-28 Thread Chris Bender
Dude that was great it worked, I only changed the modulate to keep to work. Thanks Sent from my iPhone On Feb 28, 2012, at 10:17 AM, Damien Fleuriot wrote: > Regarding your rule #12, I confirm it is matched, and you have seen it > yourself: the bytes and states values change. > > > Regarding

Re: PF issue (rule match but rule fails)

2012-02-28 Thread Damien Fleuriot
Regarding your rule #12, I confirm it is matched, and you have seen it yourself: the bytes and states values change. Regarding modulate state, you can find the manual entry for OpenBSD's page which states that: === The modulate state option works just like keep state except that it only applies t

Re: PF issue (rule match but rule fails)

2012-02-28 Thread csbender
Hi Damien, PF folks yes checking the pflog is important. I am not entirely sure but please correct were I go off path. I send SMTP traffic from client here is pflog: # tcpdump -nei pflog0 host 10.156.81.10 and port 25 tcpdump: listening on pflog0, link-type PFLOG 09:37:14.901238 rule 12/(ma

Re: PF issue (rule match but rule fails)

2012-02-28 Thread Damien Fleuriot
On 2/28/12 2:27 AM, csbender wrote: > Hi Folks, > it is great to join you. > I am pretty new to the world of PF so please excuse some ignorance at least > for > now. > > > > I have a PF running freebsd 8.2. > > Here is my issue... > > I have SMTP rule allowing traffic in and out for cert