synproxy state does not work on FreeBSD 7.1-PRERELEASE

Vladimir Ermakov samflanker at gmail.com
Thu Dec 4 23:16:03 PST 2008


Max Laier wrote:
>
>
> Okay ... here is the story:  First off, "synproxy state" is *NOT* broken!  But 
> you need to be careful how you use it.  If you - like the OP - intend to use 
> it to protect a service running on the same box as your pf, you must make sure 
> to "set skip on lo0" or it will not work.  If you are protecting a box behind 
> the pf box, there is no need for that.
>
>   

Max, sorry for your time. 
Thanks, i solved the problem.

/Vladimir Ermakov



More information about the freebsd-pf mailing list