pfSense TCP retransmissions flagged as out-of-state: when does sloppy state tracking help?
Goal I want pfSense to tolerate TCP retransmissions (retries) on a connection without tearing down the state entry or causing the application to re-issue writes, while still keeping stateful inspection strict enough to be meaningful. Context and constraints pfSense uses the pf stateful engine: once a packet matches a pass rule, subsequent packets in the flow
