Re: PF and Raptor SMTP gateway incompatible?

[Darren Reed <avalon@coombs.anu.edu.au>]

In some mail from Mike Lewinski, sie said:
> 
> I think I've tracked this down.... it's also visible under ipfilter on a 2.9
> box with very generic configs. For readability the sample IPs below have
> been replaced with 'openbsd' and 'raptor'.
[...]

Ah, so it is "this" product which is causing the problem!

There are other threads about dealing with it in the misc archives.
If you have a "block return-rst in proto tcp ..." (without flags S)
type rule, the 1st connection will fail but the 2nd will succeed.

I've updated IPFilter to better deal with this situation - so long
as you have a "block return-rst in" type rule.

Darren