[Bug 226850] [pf] Matching but failed rules block without return

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226850

--- Comment #11 from Ermal Luçi <eri at freebsd.org> ---
I misread the issue you are experiencing.
I do not see any impact on this apart of either 
- overloading the set block-policy global to express the global policy. pf
already marks as dropped the packets that go through failure paths.
- Introduce a new global policy like set failure-return-policy. 

In both scenarios the underlying implementation does not differ.
I am not sure on the added value of having it be controllable per-rule!

-- 
You are receiving this mail because:
You are the assignee for the bug.