dumb question about "no state"

2024-03-05 Thread Eugene M. Zheganin
Hello, I hope the following is self-explanatory: pfctl -vs rules: [...] pass quick proto tcp all flags A/A no state   [ Evaluations: 1125881   Packets: 972814    Bytes: 421350757 States: 82    ]   [ Inserted: uid 0 pid 28187 State Creations: 82    ] man pf.conf: pass  The packet is pa

Re: dumb question about "no state"

2024-03-05 Thread Eugene M. Zheganin
Hello, On 05.03.2024 14:29, Miroslav Lachman wrote: Why does this rule create states ? Am I misreading/misunderstanding the part "state is created unless the no state option is specified" ? Also from the man page, few lines after your citation: By default pf(4) filters packets statefully; t

PF NAT and tunnel interfaces

2024-03-21 Thread Eugene M. Zheganin
Hello, for some significant time, from about 12.x early releases, I'm hhavingg huge issues with PF NAT on tunnel interfaces and I don't understant why. So I'm gonna start with very basic question: I have a rule that looks like this: nat on tun1 proto { tcp, udp, icmp, gre } from to any ->

PF NAT and tunnel interfaces

2024-03-21 Thread Eugene M. Zheganin
Hello, Please discard my previous letter - I accidentally pressed Ctrl-Enter macro which appears to be a "Send" macro in Thunderbird. I'm terribly sorry. Eugene.