Re: PF new default flags S/SA problems

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

[view in full thread]

From: Stuart Henderson <stu@...>

To: Kleber Rocha <klinux@...>

Cc: <misc@...>

Subject: Re: PF new default flags S/SA problems

Date: Wednesday, November 14, 2007 - 10:26 am

On 2007/11/14 11:42, Kleber Rocha wrote:

quoted text

> I had many problems with my rules in PF, the new default flags S/SA,
> causes problems in rules that are not written using flags, several
> rules not match in OpenBSD 4.2.

Well, OpenBSD 4.1, actually...

The old method results in nasty hard-to-diagnose problems for
TCP options used by some modern OS.

Think of it as a good opportunity to rewrite and clean your ruleset.

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

PF new default flags S/SA problems, Kleber Rocha, (Wed Nov 14, 9:42 am)

Re: PF new default flags S/SA problems, Stuart Henderson, (Wed Nov 14, 10:26 am)


linux-kernel:
Tony Lindgren	[PATCH 26/90] ARM: OMAP: abstract debug card setup (smc, leds)
Greg Kroah-Hartman	[PATCH 001/196] Chinese: Add the known_regression URI to the HOWTO
Vladislav Bolkhovitin	Re: Integration of SCST in the mainstream Linux kernel
Jesper Juhl	Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3
git:

linux-netdev:
Gerrit Renker	[PATCH 27/37] dccp: Integration of dynamic feature activation - part 2 (server side)
Jarek Poplawski	[PATCH] pkt_sched: Destroy gen estimators under rtnl_lock().
David Miller	[GIT]: Networking
Frans Pop	svc: failed to register lockdv1 RPC service (errno 97).
openbsd-misc:

Re: PF new default flags S/SA problems

Online users