On 12/19/2005 04:33:27 PM, Jonathan Rogers wrote:
My new OpenBSD 3.8/pf firewall setup seems now to mostly be doing what
it's supposed to. One lingering problem, though, that I just can't
find
the source of. I'm getting occasional log messages like this (standard
tcpdump format):

   pass in quick on $dmz_if inet proto tcp from 192.168.3.0/26  to any
port  { 53 80  }
      keep state flags S/SA label "pass in dmz->any!good"

Would it be because dns sometimes talks UDP?  (I forget the
details.)

Karl <[EMAIL PROTECTED]>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein

Reply via email to