On 4 Dec 2017, at 19:57, John Jasen wrote:
Depending on circumstances, we see a lot or a very few of the
following
messages:
"pf connection lookup failed (no rdr?)"
That means the state lookup (using ioctl(DIOCNATLOOK)) failed.
There seem to be a couple of possible reasons why that might happe
rdr pass log proto udp \
from {,} \
to port tftp \
tag ALLOWED \
-> 127.0.0.1 port 6969
There is a pass quick tagged ALLOWED later in rules.
/etc/inetd.conf contains:
acmsoda dgram udp wait root /usr/libexec/tftp-proxy tftp-proxy
Depending on circumstances, we see a