Why after computer shutdown there are still "established" connections in state

[akoei]

After a computer has been shutdown, in state table, I still can see there are lots of connections belong to this computer and have "established:established" status connect to a outside IP address. I am wondering how this gona happen?

[Cry Havok]

How long after?

[akoei]

one day long

[Cry Havok]

That does sound a little long - what version of pfSense?

[akoei]

1.2 rc1

[cmb]

If the computer doesn't close its connections properly at shutdown (which isn't unlikely), they'll hang around until the timeout of the state table, or the state timeout on that particular rule.

[akoei]

what's the default time out value? Is the one we can set up at each firewall rule?