IGMP with no matching rules

Jason Hellenthal jhellenthal at dataix.net
Sun May 5 05:28:47 UTC 2013


Wow I can't believe I skipped over that option.

pass quick proto igmp allow-opts

Did it perfectly!!!!

Thank you Florian

-- 
 Jason Hellenthal
 JJH48-ARIN
 -(2^(N-1))


On May 4, 2013, at 9:44, Florian Smeets <flo at smeets.im> wrote:

> On 04.05.13 09:36, Jason Hellenthal wrote:
>> Hey Everyone,
>> 
>> Has anyone seen IGMP traffic hit there pflog interface even if there
>> are no rules matching that tell it to log ?
>> 
>> Anyone that has a pointer to eliminate the logging of the IGMP
>> traffic would be extremely helpful. This has been fairly frustrating
>> up to this point trying to either create a rule to catch it that does
>> not specify logging or eliminate rules that shouldn't be matching but
>> do.
> 
> It would be easier to tell with your rule set, but I think this may be
> related to IP options, look for allow-opts in pf.conf(5).
> 
> Florian
> 


More information about the freebsd-pf mailing list