PF slowing down file copies

RW fbsd06 at
Thu Feb 22 14:30:36 UTC 2007

On Wed, 21 Feb 2007 19:38:39 +0100
J65nko <j65nko at> wrote:

> For keeping state on TCP connections you should only create state on
> the first packet of the 3 way TCP handshake. Using "flags S/SA" will
> ensure this. This will prevent problems with TCP windows scaling..

Why? Creating a state entry causes subsequent packets, in the same tcp
connection, to bypass the rules altogether.

More information about the freebsd-questions mailing list