On cs, aug 16, 2012 at 20:43:18 +0100, Kevin Chadwick wrote: > > > > pass all flags S/SA > > > > pass in on pppoe0 inet proto tcp from <src> to <dst> port = 5555 flags > > > > S/SA synproxy state > > > > > > Originally you posted pass in quick. Keep the quick in there, not for > any reason other than I have a quick in my rules. Same with the NIC, I > don't have any logical hopes for you.
Switched the vge(4) with the em(4) NIC, but the situation is the same; PF's synproxy state won't work on a pppoe0 device. Kevin, may I ask you to describe me the network setup in which you've made synproxy with pppoe work? I'm curious about the NICs and how do they connect to the ISP and/or LAN/NAT etc. Thanks, Daniel -- LÉVAI Dániel PGP key ID = 0x83B63A8F Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F