SEO

Hi.

I have any problem with PF work.
I use OpenBSD 4.0 and PF, installed with OS. Server have one active
network interface bge0 and named petlin.example.su. In pf. conf only
one rule:
---
pass out log keep state
---
>From this server I initiate many connections to another server
(x.x.x.x) through PF. I see this connections in pftop, i see it on
another server using netstat.
After random number connections PF destroy it. I see random number
connection and last connection write error, like this:
---
connect failed 65
Press any key to continue...
---
I send SYN, but SYN packet not go out on interface - see tcpdump log. I
have incidental number of connections.
-----tcpdump cut------
09:09:41.800309 petlin.example.su.14522 > x.x.x.x.www: . ack 1 win
16384 <nop,nop,timestamp 556696800 406794971> (DF)
09:09:41.800314 petlin.example.su.14522 > x.x.x.x.www: P 1:61(60) ack 1
win 16384 <nop,nop,timestamp 556696800 406794971> (DF)
09:09:41.800592 x.x.x.x.www > petlin.example.su.14522: . ack 61 win
49172 <nop,nop,timestamp 406794971 556696800> (DF)
09:09:41.800886 x.x.x.x.www > petlin.example.su.14522: P 1:316(315) ack
61 win 49232 <nop,nop,timestamp 406794971 556696800> (DF)
09:09:41.800897 petlin.example.su.14522 > x.x.x.x.www: F 61:61(0) ack
316 win 16069 <nop,nop,timestamp 556696800 406794971> (DF)
09:09:41.801033 x.x.x.x.www > petlin.example.su.14522: F 316:316(0) ack
61 win 49232 <nop,nop,timestamp 406794971 556696800> (DF)
09:09:41.801034 x.x.x.x.www > petlin.example.su.14522: . ack 62 win
49232 <nop,nop,timestamp 406794971 556696800> (DF)
09:09:41.801075 petlin.example.su.14522 > x.x.x.x.www: F 61:61(0) ack
317 win 16068 <nop,nop,timestamp 556696800 406794971> (DF)
09:09:41.801473 x.x.x.x.www > petlin.example.su.14522: . ack 62 win
49232 <nop,nop,timestamp 406794972 556696800> (DF)
-----tcpdump cut end------


Without PF connection working long-long time without breaks. If i use
in PF rule like this:
---
pass out log
---
all working without any problem. I have problem only when used key
'keep state'.

Have any thinks about this problem, or patch for PF?

With best regards,
DimonRonD