Date: Sun, 5 May 2013 01:21:49 -0400 From: Jason Hellenthal <jhellenthal@dataix.net> To: Florian Smeets <flo@smeets.im> Cc: "freebsd-pf@FreeBSD.org" <freebsd-pf@freebsd.org> Subject: Re: IGMP with no matching rules Message-ID: <AEF3B928-3AE9-411C-ABA5-EB63FC15036E@DataIX.net> In-Reply-To: <518510B6.8000309@smeets.im> References: <86C973B6-D12D-41AA-A1F9-D93E1C60856F@DataIX.net> <518510B6.8000309@smeets.im>
next in thread | previous in thread | raw e-mail | index | archive | help
Wow I can't believe I skipped over that option. pass quick proto igmp allow-opts Did it perfectly!!!! Thank you Florian -- Jason Hellenthal JJH48-ARIN -(2^(N-1)) On May 4, 2013, at 9:44, Florian Smeets <flo@smeets.im> wrote: > On 04.05.13 09:36, Jason Hellenthal wrote: >> Hey Everyone, >> >> Has anyone seen IGMP traffic hit there pflog interface even if there >> are no rules matching that tell it to log ? >> >> Anyone that has a pointer to eliminate the logging of the IGMP >> traffic would be extremely helpful. This has been fairly frustrating >> up to this point trying to either create a rule to catch it that does >> not specify logging or eliminate rules that shouldn't be matching but >> do. > > It would be easier to tell with your rule set, but I think this may be > related to IP options, look for allow-opts in pf.conf(5). > > Florian >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AEF3B928-3AE9-411C-ABA5-EB63FC15036E>