Current problem reports assigned to freebsd-pf@FreeBSD.org

2008-09-22 Thread FreeBSD bugmaster
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker

IMAP server talks back PF blocks

2008-09-22 Thread Leslie Jensen
When doing tcpdump -n -e -ttt -i pflog0 I frequently see packets blocked that looks like this 458660 rule 0/0(match): block in on em0: xxx.yyy.zzz.qqq.993 > qqq.zzz.yyy.xxx.59930: tcp 8 [bad hdr length 12 - too short, < 20] It's the IMAP server I'm using that tries to talk back. Is this someth

Explanation of macro

2008-09-22 Thread Leslie Jensen
I'm setting up a pf firewall and came across this macro SYN_ONLY="S/FSRA" Have tried to find out what it does but have not been successful. Will someone explain Please? Thanks /Leslie ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org

Re: Explanation of macro

2008-09-22 Thread Jille Timmermans
Leslie Jensen wrote: I'm setting up a pf firewall and came across this macro SYN_ONLY="S/FSRA" This means it will only match packets which have only set the SYN flag of FIN, SYN, RST and ACK. This is the case when starting a new (tcp) connection. -- Jille Have tried to find out what it does

Re: IMAP server talks back PF blocks

2008-09-22 Thread Jeremy Chadwick
On Mon, Sep 22, 2008 at 01:53:02PM +0200, Leslie Jensen wrote: > When doing > tcpdump -n -e -ttt -i pflog0 > > I frequently see packets blocked that looks like this > > 458660 rule 0/0(match): block in on em0: xxx.yyy.zzz.qqq.993 > > qqq.zzz.yyy.xxx.59930: tcp 8 [bad hdr length 12 - too short, < 2