From nobody Sun Aug 22 18:58:09 2021
X-Original-To: pf@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id F3C2517781D2
	for <pf@mlmmj.nyi.freebsd.org>; Sun, 22 Aug 2021 18:58:15 +0000 (UTC)
	(envelope-from shuriku@shurik.kiev.ua)
Received: from mail.flex-it.com.ua (mail.flex-it.com.ua [193.239.74.7])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4Gt4QG6sq5z3vfF
	for <pf@freebsd.org>; Sun, 22 Aug 2021 18:58:14 +0000 (UTC)
	(envelope-from shuriku@shurik.kiev.ua)
Received: from [93.183.208.50] (helo=thinkpad.flex-it.com.ua)
	by mail.flex-it.com.ua with esmtpsa  (TLS1.3) tls TLS_AES_128_GCM_SHA256
	(Exim 4.94.2 (FreeBSD))
	(envelope-from <shuriku@shurik.kiev.ua>)
	id 1mHsfW-0009N2-GL
	for pf@freebsd.org; Sun, 22 Aug 2021 21:58:06 +0300
Subject: Re: pfctl -k id not working
To: pf@freebsd.org
References: <CAAcX-AE--sff1Quqy57Ux4GwA2Lr+PM6Rt6b7Z-OvZbtYASn=w@mail.gmail.com>
From: Oleksandr Kryvulia <shuriku@shurik.kiev.ua>
Message-ID: <437ea6f8-a93f-4650-1e94-c52110d328e7@shurik.kiev.ua>
Date: Sun, 22 Aug 2021 21:58:09 +0300
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101
 Thunderbird/78.13.0
List-Id: Technical discussion and general questions about packet filter (pf) <freebsd-pf.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-pf
List-Help: <mailto:pf+help@freebsd.org>
List-Post: <mailto:pf@freebsd.org>
List-Subscribe: <mailto:pf+subscribe@freebsd.org>
List-Unsubscribe: <mailto:pf+unsubscribe@freebsd.org>
Sender: owner-freebsd-pf@freebsd.org
X-BeenThere: freebsd-pf@freebsd.org
MIME-Version: 1.0
In-Reply-To: <CAAcX-AE--sff1Quqy57Ux4GwA2Lr+PM6Rt6b7Z-OvZbtYASn=w@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Content-Language: ru
X-Rspamd-Queue-Id: 4Gt4QG6sq5z3vfF
X-Spamd-Bar: /
Authentication-Results: mx1.freebsd.org;
	dkim=none;
	dmarc=none;
	spf=pass (mx1.freebsd.org: domain of shuriku@shurik.kiev.ua designates 193.239.74.7 as permitted sender) smtp.mailfrom=shuriku@shurik.kiev.ua
X-Spamd-Result: default: False [0.20 / 15.00];
	 RCVD_VIA_SMTP_AUTH(0.00)[];
	 ARC_NA(0.00)[];
	 MID_RHS_MATCH_FROM(0.00)[];
	 FROM_HAS_DN(0.00)[];
	 TO_MATCH_ENVRCPT_ALL(0.00)[];
	 R_SPF_ALLOW(-0.20)[+mx];
	 MIME_GOOD(-0.10)[text/plain];
	 TO_DN_NONE(0.00)[];
	 DMARC_NA(0.00)[shurik.kiev.ua];
	 NEURAL_SPAM_MEDIUM(0.69)[0.692];
	 RCPT_COUNT_ONE(0.00)[1];
	 NEURAL_HAM_LONG(-0.64)[-0.644];
	 NEURAL_SPAM_SHORT(0.45)[0.454];
	 FROM_EQ_ENVFROM(0.00)[];
	 R_DKIM_NA(0.00)[];
	 MIME_TRACE(0.00)[0:+];
	 ASN(0.00)[asn:35297, ipnet:193.239.72.0/22, country:UA];
	 RCVD_COUNT_TWO(0.00)[2];
	 RCVD_TLS_ALL(0.00)[]
X-ThisMailContainsUnwantedMimeParts: N

20.08.21 22:01, Özkan KIRIK пишет:
> Hi,
>
> I'm trying to kill a single state using state id. But even state exists, no
> (0) states are killed.
>
> I'm using FreeBSD stable/12 0f97f2a1857a (Jul 26) build. Outputs are below:
>
> root@freebsd:/ # pfctl -ss -vvv | tail -5
> all tcp 10.255.4.134:60684 -> 10.2.3.10:443       ESTABLISHED:ESTABLISHED
>    [3857528462 + 256] wscale 7  [2278827950 + 1117184] wscale 9
>    age 1002336:42:40, expires in 252932:33:04, 250675:343858 pkts,
> 18984576:362136695 bytes, anchor 1308884992, rule 419430400
>    id: effe296100000018 creatorid: e9c975c1 gateway: 0.0.0.0
>    origif: ix0.167
>
> root@freebsd:/ # pfctl -k id -k effe296100000018
> killed 0 states
>
> root@freebsd:/ # pfctl -ss -vvv | tail -5
> all tcp 10.255.4.134:60684 -> 10.2.3.10:443       ESTABLISHED:ESTABLISHED
>    [1005467278 + 256] wscale 7  [2245470126 + 1117184] wscale 9
>    age 60966:41:04, expires in 280894:34:40, 250677:343861 pkts,
> 18984766:362137617 bytes, anchor 1308884992, rule 419430400
>    id: effe296100000018 creatorid: e9c975c1 gateway: 0.0.0.0
>    origif: ix0.167
>
> is it possible to fix it?
>
> Regards
>

Same on current.