Re: dumb question about "no state"

2024-03-06 Thread Kajetan Staszkiewicz
On 2024-03-05 09:11, Eugene M. Zheganin wrote: pass quick proto tcp all flags A/A no state   [ Evaluations: 1125881   Packets: 972814    Bytes: 421350757 States: 82    ]   [ Inserted: uid 0 pid 28187 State Creations: 82    ] man pf.conf: pass  The packet is passed; state is created un

Re: dumb question about "no state"

2024-03-05 Thread Miroslav Lachman
On 05/03/2024 11:30, Eugene M. Zheganin wrote: Hello, On 05.03.2024 14:29, Miroslav Lachman wrote: Why does this rule create states ? Am I misreading/misunderstanding the part "state is created unless the no state option is specified" ? Also from the man page, few lines after your citation:

Re: dumb question about "no state"

2024-03-05 Thread Eugene M. Zheganin
Hello, On 05.03.2024 14:29, Miroslav Lachman wrote: Why does this rule create states ? Am I misreading/misunderstanding the part "state is created unless the no state option is specified" ? Also from the man page, few lines after your citation: By default pf(4) filters packets statefully; t

Re: dumb question about "no state"

2024-03-05 Thread Miroslav Lachman
On 05/03/2024 09:11, Eugene M. Zheganin wrote: Hello, I hope the following is self-explanatory: pfctl -vs rules: [...] pass quick proto tcp all flags A/A no state   [ Evaluations: 1125881   Packets: 972814    Bytes: 421350757 States: 82    ]   [ Inserted: uid 0 pid 28187 State Creations:

dumb question about "no state"

2024-03-05 Thread Eugene M. Zheganin
Hello, I hope the following is self-explanatory: pfctl -vs rules: [...] pass quick proto tcp all flags A/A no state   [ Evaluations: 1125881   Packets: 972814    Bytes: 421350757 States: 82    ]   [ Inserted: uid 0 pid 28187 State Creations: 82    ] man pf.conf: pass  The packet is pa