Question on packet filter using in and out interfaces

[Tonix (Antonio Nati)]

Il 21/07/2012 20:23, Daniel Hartmeier ha scritto:
> On Sat, Jul 21, 2012 at 05:22:07PM +0200, Tonix (Antonio Nati) wrote:
>
>> If you can provide a link to this PF diagram it would be very useful.
>
> A copy is preserved on http://www.benzedrine.cx/pf_flow.png
>
> Yes, there are two phases.
>
> HTH,
> Daniel
>


Daniel,

thanks for pointing at the diagram.

What it is not clear to me is related to in/out rules evaluation.

Diagram starts obviously from the packet entering the system, until the 
packet exits the system. When the packet enters the system, which rules 
are evaluated? All rules related to interface, both for IN and OUT? Or 
only IN?

PF manual says all rules in pf.conf are evaluated, so I suppose all 
rules applying to that interface are evaluated... or only IN rules are 
evaluated in this first step, and only OUT rules are evaluated in second 
step?

Sorry, but I'm missing some key points.

Regards,

Tonino



-- 
------------------------------------------------------------
         Inter at zioni            Interazioni di Antonio Nati
    http://www.interazioni.it      tonix at interazioni.it
------------------------------------------------------------