Re: What is wrong with pf in 5.0?

[Nino Dehne <ndehne%gmail.com@localhost>]

On Sun, May 31, 2009 at 09:00:30PM +0200, Hauke Fath wrote:
> At 17:24 Uhr +0200 31.5.2009, Nino Dehne wrote:
> >I upgraded my router to 5.0.0_PATCH and somehow pf is borked.
> 
> Is not.

Indeed.


> >What the hell? Why does it apply TCP flags and state keeping when I didn't
> >request that anywhere?
> 
> That is the default for post-OpenBSD 4.1 pf.

Thanks, I didn't notice for several reasons:

1) server is still running 4.0 and the router has no man pages
2) http://netbsd.gw.com/cgi-bin/man-cgi?pf.conf defaults to 3.0 man pages (?!)

I fixed the ruleset and all is well. Thanks.

Regards

-- 
Of course it runs NetBSD.