Re: Understanding if-bound vs floating state policy
Igor Podlesny <[email protected]> Fri, 13 Dec 2019 22:12:46 +0700
| Newsgroups | gmane.os.openbsd.pf |
|---|---|
| Message-ID | <CACdsUq5tDRFSOphzF+X5ew3eKS-Nbe_dNvCHcC66dHCXVUV6-Q@mail.gmail.com> |
On Fri, 13 Dec 2019 at 22:00, Victor Sudakov <[email protected]> wrote: [...] > But then, what is the real difference betwttn if-bound and global? it's not global but rather "floating". man pf.conf says: "... floating States can match packets on any interfaces (the default). ..." IOW, floating state doesn't care which interface gets reply traffic, meanwhile if-bound does. This adds something like urpf-failed protection to the state table. -- End of message. Next message?