RE: "keep state" kills (ssh) session?!

2005-06-17 Thread Melameth, Daniel D.
You might want to include a tcpdump capture around the time of the failure from the OpenBSD box. Simon Kammerer wrote: > My pf.conf with OpenBSD 3.7 (GENERIC) > > > > int_if = "vr1" > ext_if = "vr0" > > int_net = "192.168.1.0/24" > ext_net = "192.168.0.0/24" > > block all > > pass quick on l

"keep state" kills (ssh) session?!

2005-06-17 Thread Simon Kammerer
Hi list! My pf.conf with OpenBSD 3.7 (GENERIC) int_if = "vr1" ext_if = "vr0" int_net = "192.168.1.0/24" ext_net = "192.168.0.0/24" block all pass quick on lo0 all pass in on $int_if from $int_net to any pass out on $int_if from any to $int_net pass in quick on $ext_if proto tcp from any