In YANET the keep-state directive only stores the state of packets, similar to ipfw's record-state,
and does not include an implicit check-state for all packets like in ipfw.
Possible solutions are:
Rename keep-state to record-state to accurately reflect its function.
Update keep-state in YANET to also perform automatic state checks
In YANET the
keep-statedirective only stores the state of packets, similar to ipfw'srecord-state, and does not include an implicitcheck-statefor all packets like in ipfw.Possible solutions are:
keep-statetorecord-stateto accurately reflect its function.keep-statein YANET to also perform automatic state checks