pfctl -a anchorname -F all does not clear states AND pfctl -anchorname -F states clears all states even ones not created by rules in "anchorname"

2010-06-30 Thread Siju George
Hi, I have been playing with anchors lately and I am missing some thing. The machine is "4.7 GENERIC#558 i386" The pf.conf is int_if="vr0" ext_ifA="sk0" ext_ifT="vr1" set loginterface sk0 set skip on lo match out on $ext_ifA inet from $int_if:network

Re: pfctl -a anchorname -F all does not clear states AND pfctl -anchorname -F states clears all states even ones not created by rules in "anchorname"

2010-07-02 Thread Henning Brauer
> # pfctl -a atelonly -F all -Fall with -a makes no sense whatsoever. -Fa clears a lot of non-anchor specific shit. we'll make pfctl bail on that combo. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services D

Re: pfctl -a anchorname -F all does not clear states AND pfctl -anchorname -F states clears all states even ones not created by rules in "anchorname"

2010-07-03 Thread Siju George
On Sat, Jul 3, 2010 at 9:55 AM, Henning Brauer wrote: >> # pfctl -a atelonly -F all > > -Fall with -a makes no sense whatsoever. -Fa clears a lot of > non-anchor specific shit. we'll make pfctl bail on that combo. > ok :-) So what would be the best way to flush all the states created by a specif