Date: Tue, 14 Oct 2014 12:54:58 -0700 From: Laszlo Danielisz <laszlo_danielisz@yahoo.com> To: "pf@freebsd.org" <pf@freebsd.org> Subject: drop vs return Message-ID: <1413316498.26781.YahooMailNeo@web160701.mail.bf1.yahoo.com>
next in thread | raw e-mail | index | archive | help
Hi, Which is your set block-policy? Drop or Return? And why? Cheers, Laszlo From owner-freebsd-pf@FreeBSD.ORG Fri Oct 17 10:14:45 2014 Return-Path: <owner-freebsd-pf@FreeBSD.ORG> Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A73F7A40 for <freebsd-pf@freebsd.org>; Fri, 17 Oct 2014 10:14:45 +0000 (UTC) Received: from mail1.bemta5.messagelabs.com (mail1.bemta5.messagelabs.com [195.245.231.141]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mail1.bemta5.messagelabs.com", Issuer "VeriSign Class 3 International Server CA - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3D3521C0 for <freebsd-pf@freebsd.org>; Fri, 17 Oct 2014 10:14:44 +0000 (UTC) Received: from [85.158.139.51:50298] by server-5.bemta-5.messagelabs.com id E3/BD-11546-F7AE0445; Fri, 17 Oct 2014 10:07:59 +0000 X-Env-Sender: Aleksej.Spenst@harman.com X-Msg-Ref: server-12.tower-180.messagelabs.com!1413540366!30955484!15 X-Originating-IP: [194.121.90.173] X-StarScan-Received: X-StarScan-Version: 6.12.2; banners=-,-,- X-VirusChecked: Checked Received: (qmail 4397 invoked from network); 17 Oct 2014 10:07:28 -0000 Received: from unassigned (HELO HIKAWSEXHC03.ad.harman.com) (194.121.90.173) by server-12.tower-180.messagelabs.com with AES128-SHA encrypted SMTP; 17 Oct 2014 10:07:28 -0000 Received: from HIKAWSEXMB02.ad.harman.com ([169.254.2.176]) by HIKAWSEXHC03.ad.harman.com ([172.16.1.113]) with mapi id 14.03.0195.001; Fri, 17 Oct 2014 12:07:08 +0200 From: "Spenst, Aleksej" <Aleksej.Spenst@harman.com> To: "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org> Subject: AW: Fragmented packets are not redirected Thread-Topic: Fragmented packets are not redirected Thread-Index: Ac/nkfAvIWGsjtOvSuyBBqYZc4mz4gAFA7GAAARHfZAAi6eJ8A== Date: Fri, 17 Oct 2014 10:07:07 +0000 Message-ID: <CBA35483CE5B4D4B804BF128A77A61650E99FA17@HIKAWSEXMB02.ad.harman.com> References: <CBA35483CE5B4D4B804BF128A77A61650E99EC6B@HIKAWSEXMB02.ad.harman.com> <20141014135714.GT2017@vega.codepro.be> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.16.102.147] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" <freebsd-pf.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-pf>, <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>; List-Post: <mailto:freebsd-pf@freebsd.org> List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>, <mailto:freebsd-pf-request@freebsd.org?subject=subscribe> X-List-Received-Date: Fri, 17 Oct 2014 10:14:45 -0000 SGkgQWxsLA0KDQpJJ20gdGhpbmtpbmcgYWJvdXQgaG93IEkgY2FuIGRlYnVnIHRoaXMgcHJvYmxl bS4NCkkgZW5hYmxlIGxvZ2dpbmcgZm9yIGJsb2NrZWQgcGFja2V0cyAoYmxvY2sgbG9nLWFsbCBh bGwpLiBNeSBwZi5jb25mIGxvb2tzIGFwcHJveGltYXRlbHkgc286IA0KDQpzY3J1YiBpbiBvbiB3 bGFuMCBhbGwNCnJkciBvbiB3bGFuMCBwcm90byB1ZHAgZnJvbSBhbnkgdG8gKHNlbGYpIHBvcnQg OTg3MCAtPiAxOTIuMTY4LjAuMSBwb3J0IDk4NzANCmJsb2NrIGxvZy1hbGwgYWxsDQpwYXNzIG9u IHdsYW4wIGFsbA0KDQpUaGUgZnJhZ21lbnRlZCBwYWNrZXRzIGFyZSBub3QgcmVkaXJlY3RlZCB0 byAxOTIuMTY4LjAuMSwgYnV0IHRoZXkgYXJlIGFsc28gbm90IGJsb2NrZWQgc2luY2UgSSBkb24n dCBzZWUgdGhlbSBpbiBsb2dzICh3aXRoIHRjcGR1bXAgLWkgcGZsb2cwKS4gV2hlcmUgZG8gdGhl eSBkaXNhcHBlYXI/IEFyZSB0aGV5IGp1c3Qgc2lsZW50bHkgZGlzY2FyZGVkIGJ5IHBmPw0KDQpJ IGFsc28gdHJpZWQgdG8gYWRkICJsb2ctYWxsIiB0byB0aGUgc2NydWIgcnVsZToNCg0Kc2NydWIg aW4gbG9nLWFsbCBvbiB3bGFuMCBhbGwNCg0KLS0+IEkgZG9uJ3Qgc2VlIGFueXRoaW5nIGZyb20g dGhpcyBydWxlIGluIHRoZSBsb2dzIGFzIHdlbGwhDQoNCk15IGFub3RoZXIgcXVlc3Rpb24gaXMg YWJvdXQgdGhlIG9wdGlvbiAic2V0IGRlYnVnIDxsZXZlbD4iIHRoYXQgb25lIGNhbiB3cml0ZSBh dCB0aGUgYmVnaW5uaW5nIG9mIHRoZSBwZi5jb25mLiBXaGF0IGlzIHRoaXMgZGVidWcgbGV2ZWwg Zm9yPyBJIHRob3VnaHQgdGhhdCB0aGVyZSBpcyBvbmx5IG9uZSB3YXkgdG8gZGVidWcgcGYgcnVs ZXM6IHdpdGggdGhpcyAibG9nIi8ibG9nLWFsbCIga2V5d29yZCBhbmQgcGZsb2cwIGludGVyZmFj ZS4gSXMgdGhpcyBkZWJ1ZyBsZXZlbCBzb21lIG90aGVyIGtpbmQgb2YgZGVidWdnaW5nPyBXaGVu IEkgd3JpdGUgdGhlIG9wdGlvbiAic2V0IGRlYnVnIG5vbmUiIGluIHRoZSBwZi5jb25mLCBJIHN0 aWxsIGNhbiBzZWUgYWxsIHBhY2tldHMgbG9nZ2VkIGF0IHRoZSBwZmxvZzAgaW50ZXJmYWNlLiBT bywgaXMgaXQgc29tZXRoaW5nIGRpZmZlcmVudD8NCg0KVGhhbmtzIQ0KQWxla3Nlai4NCg0KDQoN Cg0KDQotLS0tLVVyc3Byw7xuZ2xpY2hlIE5hY2hyaWNodC0tLS0tDQpWb246IFNwZW5zdCwgQWxl a3NlaiANCkdlc2VuZGV0OiBEaWVuc3RhZywgMTQuIE9rdG9iZXIgMjAxNCAxNjowMw0KQW46IEty aXN0b2YgUHJvdm9zdA0KQ2M6IGZyZWVic2QtcGZAZnJlZWJzZC5vcmcNCkJldHJlZmY6IEFXOiBG cmFnbWVudGVkIHBhY2tldHMgYXJlIG5vdCByZWRpcmVjdGVkDQoNCkhpIEtyaXN0b2YsDQoNClRo YW5rIHlvdSBmb3IgeW91ciBhbnN3ZXIuDQpJIHJlYWQgdGhhdCAiZnJhZ21lbnQgcmVhc3NlbWJs ZSIgaXMgdGhlIGRlZmF1bHQgYmVoYXZpb3Igb2Ygc2NydWIuIFNvLCAic2NydWIgaW4iIGFuZCAi c2NydWIgaW4gZnJhZ21lbnQgcmVhc3NlbWJsZSIgaXMgdGhlIHNhbWUuIEJ1dCBqdXN0IHRvIGJl IHN1cmUgSSd2ZSBhbHNvIHRyaWVkIGl0IGFscmVhZHkgLT4gZGlkbid0IGhlbHAuDQoNClJlZ2Fy ZHMsDQpBbGVrc2VqLg0KDQoNCi0tLS0tVXJzcHLDvG5nbGljaGUgTmFjaHJpY2h0LS0tLS0NClZv bjogS3Jpc3RvZiBQcm92b3N0IFttYWlsdG86a3Jpc3RvZkBzaWdzZWd2LmJlXQ0KR2VzZW5kZXQ6 IERpZW5zdGFnLCAxNC4gT2t0b2JlciAyMDE0IDE1OjU3DQpBbjogU3BlbnN0LCBBbGVrc2VqDQpD YzogZnJlZWJzZC1wZkBmcmVlYnNkLm9yZw0KQmV0cmVmZjogUmU6IEZyYWdtZW50ZWQgcGFja2V0 cyBhcmUgbm90IHJlZGlyZWN0ZWQNCg0KT24gMjAxNC0xMC0xNCAwOTozMzo0NCAoKzAwMDApLCBT cGVuc3QsIEFsZWtzZWogPEFsZWtzZWouU3BlbnN0QGhhcm1hbi5jb20+IHdyb3RlOg0KPiBJdCBp cyBjbGVhciB0aGF0IGlmIHRoZSBJUCBmcmFnbWVudHMgYXJlIG5vdCByZWFzc2VtYmxlZCBhdCB0 aGUgc2VydmVyIA0KPiB0aGV5IGNhbm5vdCBiZSByZWRpcmVjdGVkIHNpbmNlIHRoZSByZWRpcmVj dGlvbiBydWxlIGlzIHdyaXR0ZW4gZm9yIA0KPiBVRFAgcGFja2V0cy4gVGhhdCBpcyB3aHkgSSBo YXZlIHRoaXMgc2NydWIgcnVsZSBhdCB0aGUgdmVyeSBiZWdpbm5pbmcgDQo+IG9mIG15IHBmLmNv bmY6DQo+IA0KPiBzY3J1YiBpbiBvbiB3bGFuMCBhbGwNCj4gDQo+IEkgdGhvdWdodCB0aGF0IHRo aXMgcnVsZSBzaG91bGQgcmVhc3NlbWJsZSBhbGwgdGhlIGluY29taW5nIGZyYWdtZW50cy4NCj4g VGhlIHJlYXNzZW1ibGVkIFVEUCBwYWNrZXRzIHNob3VsZCBiZSB0aGVuIGNvcnJlY3RseSBwYXNz ZWQgdGhyb3VnaCANCj4gdGhlIHJkciBydWxlIGFuZCByZWRpcmVjdGVkIHRvIG15IFBDLiBCdXQg dGhpcyBkb2VzIG5vdCBoYXBwZW4uDQo+IA0KSSB0aGluayB0aGF0IHlvdSB3YW50ICdzY3J1YiBp biBvbiB3bGFuMCBhbGwgZnJhZ21lbnQgcmVhc3NlbWJsZScuDQoNClJlZ2FyZHMsDQpLcmlzdG9m DQoNCg0KDQpWb246IFNwZW5zdCwgQWxla3NlaiANCkdlc2VuZGV0OiBEaWVuc3RhZywgMTQuIE9r dG9iZXIgMjAxNCAxMTozNA0KQW46IGZyZWVic2QtcGZAZnJlZWJzZC5vcmcNCkJldHJlZmY6IEZy YWdtZW50ZWQgcGFja2V0cyBhcmUgbm90IHJlZGlyZWN0ZWQNCg0KSGkgQWxsLA0KDQpJIGhhdmUg b25lIHByb2JsZW0gd2l0aCByZWRpcmVjdGlvbiBvZiB0aGUgZnJhZ21lbnRlZCBwYWNrZXRzLiBN eSB1c2UgY2FzZToNCg0KQSBtb2JpbGUgcGhvbmUgc2VuZHMgdGhlIFJUUCB2aWRlbyBzdHJlYW0g dG8gbXkgc2VydmVyLiBUaGUgc2VydmVyIGhhcyB0aGUgcGYgaW5zdGFsbGVkLiBBbGwgUlRQIHBh Y2tldHMgYXJlIHJlZGlyZWN0ZWQgZnJvbSB0aGUgc2VydmVyIHRvIG15IFBDOg0KDQp8TW9iaWxl fC0tLS0tLT4tLS1SVFAtLS0tPi0tLS0tfFNlcnZlcnwtLS0tLS0tPi0tLVJUUC0tLT4tLS0tLXxQ Q3wNCg0KVGhlIHNtYWxsIFJUUCBwYWNrZXRzIGFyZSByZWRpcmVjdGVkIHRvIG15IFBDIHdpdGhv dXQgYW55IHByb2JsZW1zLg0KVGhlIHByb2JsZW0gaXMgd2l0aCB0aGUgbGFyZ2UgUlRQIHBhY2tl dHMgdGhhdCBhcmUgZnJhZ21lbnRlZCBhbmQgdHJhbnNtaXR0ZWQgaW4gc2V2ZXJhbCBJUCBmcmFn bWVudHMuIFRoZXNlIElQIGZyYWdtZW50cyBhcmUgbm90IHJlZGlyZWN0ZWQgdG8gUEMuIFRoZSBy ZWRpcmVjdGlvbiBydWxlIGF0IHRoZSBzZXJ2ZXI6DQoNCnJkciBvbiB3bGFuMCBwcm90byB1ZHAg ZnJvbSBhbnkgdG8gKHNlbGYpIHBvcnQgOTg3MCAtPiAxOTIuMTY4LjAuMSBwb3J0IDk4NzANCg0K ICAgICB8IFMgZSByIHYgZSByIHwNCi0+LS18d2xhbjAgICAgICBldGgwfC0tPi0tLS0tLS18UEMg MTkyLjE2OC4wLjF8DQoNCkl0IGlzIGNsZWFyIHRoYXQgaWYgdGhlIElQIGZyYWdtZW50cyBhcmUg bm90IHJlYXNzZW1ibGVkIGF0IHRoZSBzZXJ2ZXIgdGhleSBjYW5ub3QgYmUgcmVkaXJlY3RlZCBz aW5jZSB0aGUgcmVkaXJlY3Rpb24gcnVsZSBpcyB3cml0dGVuIGZvciBVRFAgcGFja2V0cy4gVGhh dCBpcyB3aHkgSSBoYXZlIHRoaXMgc2NydWIgcnVsZSBhdCB0aGUgdmVyeSBiZWdpbm5pbmcgb2Yg bXkgcGYuY29uZjoNCg0Kc2NydWIgaW4gb24gd2xhbjAgYWxsDQoNCkkgdGhvdWdodCB0aGF0IHRo aXMgcnVsZSBzaG91bGQgcmVhc3NlbWJsZSBhbGwgdGhlIGluY29taW5nIGZyYWdtZW50cy4gVGhl IHJlYXNzZW1ibGVkIFVEUCBwYWNrZXRzIHNob3VsZCBiZSB0aGVuIGNvcnJlY3RseSBwYXNzZWQg dGhyb3VnaCB0aGUgcmRyIHJ1bGUgYW5kIHJlZGlyZWN0ZWQgdG8gbXkgUEMuIEJ1dCB0aGlzIGRv ZXMgbm90IGhhcHBlbi4gDQoNCkRvIHlvdSBoYXZlIGFueSBpZGVhcy90aXBzPw0KDQpUaGFua3Mg YSBsb3QhDQpBbGVrc2VqLg0KDQo=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1413316498.26781.YahooMailNeo>