Drop states after inactivity?
-
Can pfsense be programmed to drop open states after a certain amount of inactivity time?
-
bump
-
They are already dropped after a period of inactivity.
Under the advanced options, you can set this so there is a more aggressive timeout (the firewall optimization setting).
If something is not being dropped, odds are it has some kind of keep-alive protocol happening that you don't see. Some things like IRC have constant client-server communication that is hidden from the user, so you may not see a message from a person in hours, but the connection is still technically active.