Il 21/07/2012 20:23, Daniel Hartmeier ha scritto:
On Sat, Jul 21, 2012 at 05:22:07PM +0200, Tonix (Antonio Nati) wrote:
If you can provide a link to this PF diagram it would be very useful.
A copy is preserved on http://www.benzedrine.cx/pf_flow.png
Yes, there are two phases.
HTH,
Daniel
Daniel,
thanks for pointing at the diagram.
What it is not clear to me is related to in/out rules evaluation.
Diagram starts obviously from the packet entering the system, until the
packet exits the system. When the packet enters the system, which rules
are evaluated? All rules related to interface, both for IN and OUT? Or
only IN?
PF manual says all rules in pf.conf are evaluated, so I suppose all
rules applying to that interface are evaluated... or only IN rules are
evaluated in this first step, and only OUT rules are evaluated in second
step?
Sorry, but I'm missing some key points.
Regards,
Tonino
--
------------------------------------------------------------
Inter@zioni Interazioni di Antonio Nati
http://www.interazioni.it [email protected]
------------------------------------------------------------
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"
