On 05/11/2007, Axton <[EMAIL PROTECTED]> wrote: > I remember reading some changes to the defaults for pf in how states > are tracked in pf.conf rules (default is now keep state flags S/SA). > For the life of me I can not find any official reference to it on the > internet or in my mail. Can someone give me a pointer? > > The only reference I can find on the net (nothing from openbsd.org): > http://home.nuug.no/~peter/pf/en/long-firewall.html#AEN415
http://www.openbsd.org/41.html >>>> keep state is now the default for pf.conf(5) rules, as is the flags S/SA option on TCP connections. no state and flags any can be used to disable stateful filtering or TCP flags checking. C.