Editorial question81.5K views2,304 votes0 answers4,586 following
AI-generatedpfSense TCP retransmissions flagged as out-of-state: when does sloppy state tracking help?
Goal I want pfSense to tolerate TCP retransmissions (retries) on a connection without tearing down the state entry or causing the application to re-issue writes, while still keeping stateful inspection strict enough to be meaningful. Context and constraints pfSense uses the pf stateful engine: once a packet matches a pass rule, subsequent packets in the flow