Re: pf rule problem.

[Henning Brauer <lists-openbsd_(_at_)_bsws_(_dot_)_de>]

On Wed, Oct 02, 2002 at 05:27:25PM +0200, Takacs Istvan wrote:
> Thanks for your help!
> 
> The solution was quite freaky.
> I had to delete "flags S" from the ruleset, and
> now it works well.
> So, the rules look like these:
> 
> pass  in log quick on $LAN1IF from any to any keep state
> pass  out log quick on $LAN1IF from any to any keep state
> 
> Can anybody explain me what is the relation
> of the "flags S" directive and the deny state of the firewall
> when someone wants to browse our internal web server
> from our LAN?
> I used lynx.

ECN?