Re: Understanding if-bound vs floating state policy

Victor Sudakov <[email protected]> Fri, 13 Dec 2019 18:49:28 +0700
Newsgroups gmane.os.openbsd.pf
Message-ID <[email protected]>
--gKMricLos+KVdGMg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Igor Podlesny wrote:
> [...]
> > What am I missing?
>=20
> You're missing correct understanding of how states are handled in Pf.

Obviously. Therefore I came here for enlightenment.

>=20
> https://docs.oracle.com/cd/E37838_01/html/E60993/pfovw-rls.html#NWSECpfov=
w-passin

A good explanation, thank you for the link.  It's a pity this
explanation is not in the pf documentation (or is it?).

However, the link above does not cover the difference between if-bound
and global state policies. And from man pf.conf I made the conclusion
(mistakenly) that with state-policy=3Dfloating, pf states would work like
those in ipf/ipfw.

Where is floating vs if-bound explained at length?

--=20
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/

--gKMricLos+KVdGMg
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJd83rIAAoJEA2k8lmbXsY04oIH/3w13mmoOSTLib8jNLtQlssS
q3rGTqdigBCwJirSAIst5adRl9Wi9ahtDhDREQqszhuut7QJsVmjoE1xuBDF7mHG
z8Q0nWmfZXpJqzvaD+ijLuLVv0gRw0/1Ul11jV3/R6ic9pTysai2Ce9KQ2Xot2p7
0U8+ZG1SFQIRhNN/7zbMZvaeh+j505SxFTrMoM2QgdE/cuu2GtFhB3FG7L5AzOa6
a4a/P0J7mOpu3MGArNoIDBjw0p76K3OyjcKHlbMOJqXzQegqP7j+fyOCr57N5yaz
7f3FFsWNHwpbIKndQYLHwi1SfwwjtkhUy0mUdazS1BOQ/Z0uKsGA1gsQsrrSNrM=
=uAMI
-----END PGP SIGNATURE-----

--gKMricLos+KVdGMg--