Re: PS/2 can't get through firewall/nat

["Joseph C. Bender" <benderjc@benderhome.net>]

At 10:44 PM 08/31/2002 -0600, Bob DeBolt wrote:
>Actually you can "keep state" with UDP, ICMP if you like, 
>what you will not have in your rules are flags. I use 
>keep state lots with great results for games or ...?
> Find some good docs on tcp/ip suite of protocols and
>you will se how this is possible.
>
	Yes, and state table lookups are faster than rule lookups anyway, so you
want keep state.

What may be killing the UDP on the playstation is if you have a "scrub in
all" in your pf.conf.

The delay in the scrub may be what is killing the games, as the UDP packets
may not get to the destination in the right order/time-frame.
I had this happen with "Continiuum/Subspace" a little while back, and it's
a pure UDP based gaming system.
I'd suggest modifying your scrub statement to only scrub the
packets/protocols you need it to, and leave UDP out of the picture.


Signing off, 

Joseph Bender
benderjc (at) benderhome.net
This account is used primarily for reading and responding to mailing list
traffic and is not my main mailing address.