On a opnsense fw with promiscuous interfaces (because of carp) I see that packets received with not own mac as dst are accepted and forwarded. Checked a little the opnsense & freebsd src code - still got no idea if vanilla freebsd would (not) forward a "M_PROMISC" tagged packet?