Re: Understanding if-bound vs floating state policy
Victor Sudakov <[email protected]> Fri, 13 Dec 2019 18:49:28 +0700
| Newsgroups | gmane.os.openbsd.pf |
|---|---|
| Message-ID | <[email protected]> |
--gKMricLos+KVdGMg Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Igor Podlesny wrote: > [...] > > What am I missing? >=20 > You're missing correct understanding of how states are handled in Pf. Obviously. Therefore I came here for enlightenment. >=20 > https://docs.oracle.com/cd/E37838_01/html/E60993/pfovw-rls.html#NWSECpfov= w-passin A good explanation, thank you for the link. It's a pity this explanation is not in the pf documentation (or is it?). However, the link above does not cover the difference between if-bound and global state policies. And from man pf.conf I made the conclusion (mistakenly) that with state-policy=3Dfloating, pf states would work like those in ipf/ipfw. Where is floating vs if-bound explained at length? --=20 Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49@fidonet http://vas.tomsk.ru/ --gKMricLos+KVdGMg Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJd83rIAAoJEA2k8lmbXsY04oIH/3w13mmoOSTLib8jNLtQlssS q3rGTqdigBCwJirSAIst5adRl9Wi9ahtDhDREQqszhuut7QJsVmjoE1xuBDF7mHG z8Q0nWmfZXpJqzvaD+ijLuLVv0gRw0/1Ul11jV3/R6ic9pTysai2Ce9KQ2Xot2p7 0U8+ZG1SFQIRhNN/7zbMZvaeh+j505SxFTrMoM2QgdE/cuu2GtFhB3FG7L5AzOa6 a4a/P0J7mOpu3MGArNoIDBjw0p76K3OyjcKHlbMOJqXzQegqP7j+fyOCr57N5yaz 7f3FFsWNHwpbIKndQYLHwi1SfwwjtkhUy0mUdazS1BOQ/Z0uKsGA1gsQsrrSNrM= =uAMI -----END PGP SIGNATURE----- --gKMricLos+KVdGMg--