On Tue, Dec 15, 2015 at 09:24:03AM +0000, C. L. Martinez wrote: > > I am trying to remove "flags S/SA keep state" for tcp packets inside > pf.conf and use "keep state" only, as it can do with udp and icmp.
Why? What is it you're trying to achieve? You can override the default flags by specifying a different set or even 'flags any' but the question remains, why? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
