On 2010-03-23 18:54, Daniel Melameth wrote:
Using the example from the PF User's Guide
(http://www.openbsd.org/faq/pf/pools.html#outgoing), what's the best way to
kill all states related to ONE of the route-to interfaces created by the
"pass in on $int_if route-to { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2)
}..." rule?  It is a simple thing to kill interface-specific states
generated by the related "pass out on $ext_ifx route-to..." rules, but I'm
uncertain of the best way to do this for the first rule.

How about this?

pfctl -k $int_lan -k $ext_gw1

Simon
--
NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca
STUN/TURN server        --> http://numb.viagenie.ca
vCard 4.0               --> http://www.vcarddav.org

Reply via email to