PF and State Table

[Kian Mohageri]

On Wed, Apr 2, 2008 at 1:33 PM, Mark Pagulayan
<m.pagulayan at auckland.ac.nz> wrote:
> Hi,
>
>  What pf version are you using? Correct me if I am wrong guys, on PF4.1
>  which a the release version of pf on freebsd 7.0 when you specify keep
>  state the flag S/A is implied?
>

Correct, and if you leave out 'keep state' entirely, it will apply
'flags S/SA keep state'

e.g.,

kian at alvis:~
> cat pf.conf
pass on em0

kian at alvis:~
> pfctl -vnf pf.conf
pass on em0 all flags S/SA keep state

-Kian