UDP weirdness

[Ansar Mohammed]

But I thought pf would be tracking state?
Isnt that the whole point of statefull firewalls?



> -----Original Message-----
> From: Jille [mailto:jille at quis.cx]
> Sent: May 7, 2008 4:50 PM
> To: Ansar Mohammed
> Cc: 'Kevin K'; freebsd-pf at freebsd.org
> Subject: Re: UDP weirdness
> 
> 
> 
> Ansar Mohammed schreef:
> > Ok, so adding the line as you suggested worked.
> > Thanks Kevin.
> >
> > But why do I need to have both entries in for
> >
> > pass in proto udp from any to any port 53
> > pass out proto udp from any to any port 53
> >
> > what makes UDP so special?
> UDP is stateless,
> With TCP you've got an connection (identified by: local host:port and
> remote host:port)
> With UDP, well, you just trow the packages over the line, and hope the
> is (still) someone on the other end.
> 
> So the is (almost) no way to detect whether packets are responses to
> eachother
> 
> -- Jille