Re: 'set skip on' being inconsistent

2006-04-16 Thread Arnaud Bergeron
On 4/13/06, Chris Cameron [EMAIL PROTECTED] wrote: In my pf.conf I have: set skip on tun0 set skip on enc0 set skip on lo0 tun0 is for OpenVPN. If I run pfctl -f /etc/pf.conf, I can connect with OpenVPN and telnet to a server. If I disconnect OpenVPN, wait for a couple of minutes, then

'set skip on' being inconsistent

2006-04-13 Thread Chris Cameron
In my pf.conf I have: set skip on tun0 set skip on enc0 set skip on lo0 tun0 is for OpenVPN. If I run pfctl -f /etc/pf.conf, I can connect with OpenVPN and telnet to a server. If I disconnect OpenVPN, wait for a couple of minutes, then try connecting with telnet again, pf blocks the

Re: 'set skip on' being inconsistent

2006-04-13 Thread jared r r spiegel
On Thu, Apr 13, 2006 at 02:12:19PM -0600, Chris Cameron wrote: In my pf.conf I have: set skip on tun0 set skip on enc0 set skip on lo0 ... The connection attempt in my pflog: Apr 13 14:03:37.157867 rule 0/(match) block in on tun0: 192.168.123.6.1160 192.168.120.50.23: S