From owner-freebsd-questions@freebsd.org  Wed Oct 14 05:09:42 2020
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 711C942C5F7
 for <freebsd-questions@mailman.nyi.freebsd.org>;
 Wed, 14 Oct 2020 05:09:42 +0000 (UTC)
 (envelope-from SRS0=BQzi=DV=mail.sermon-archive.info=doug@sermon-archive.info)
Received: from mail.sermon-archive.info (sermon-archive.info [71.177.216.148])
 by mx1.freebsd.org (Postfix) with ESMTP id 4CB0pF4vxcz4gsJ
 for <freebsd-questions@freebsd.org>; Wed, 14 Oct 2020 05:09:41 +0000 (UTC)
 (envelope-from SRS0=BQzi=DV=mail.sermon-archive.info=doug@sermon-archive.info)
Received: from [10.0.1.251] (mini [10.0.1.251])
 by mail.sermon-archive.info (Postfix) with ESMTPSA id 4CB0p65X3kz2fjPy
 for <freebsd-questions@freebsd.org>; Tue, 13 Oct 2020 22:09:34 -0700 (PDT)
From: Doug Hardie <bc979@lafn.org>
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\))
Subject: pf with IP options
Message-Id: <1EA79E0D-B66B-44CD-9F9A-14D20B3BA983@mail.sermon-archive.info>
Date: Tue, 13 Oct 2020 22:09:34 -0700
To: FreeBSD Mailing List <freebsd-questions@freebsd.org>
X-Mailer: Apple Mail (2.3445.104.17)
X-Virus-Scanned: clamav-milter 0.101.4 at mail
X-Virus-Status: Clean
X-Rspamd-Queue-Id: 4CB0pF4vxcz4gsJ
X-Spamd-Bar: --
Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none;
 spf=pass (mx1.freebsd.org: domain of
 SRS0=BQzi=DV=mail.sermon-archive.info=doug@sermon-archive.info designates
 71.177.216.148 as permitted sender)
 smtp.mailfrom=SRS0=BQzi=DV=mail.sermon-archive.info=doug@sermon-archive.info
X-Spamd-Result: default: False [-2.21 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[];
 ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.96)[-0.959];
 FROM_HAS_DN(0.00)[]; MV_CASE(0.50)[];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
 PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org];
 DMARC_NA(0.00)[lafn.org: no valid DMARC record];
 RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-0.95)[-0.954];
 TO_DN_ALL(0.00)[]; NEURAL_HAM_SHORT(-0.89)[-0.892];
 R_SPF_ALLOW(-0.20)[+ip4:71.177.216.148];
 FORGED_SENDER(0.30)[bc979@lafn.org,SRS0=BQzi=DV=mail.sermon-archive.info=doug@sermon-archive.info];
 RCVD_NO_TLS_LAST(0.10)[]; R_DKIM_NA(0.00)[];
 MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:5650, ipnet:71.177.216.0/23, country:US];
 FROM_NEQ_ENVFROM(0.00)[bc979@lafn.org,SRS0=BQzi=DV=mail.sermon-archive.info=doug@sermon-archive.info];
 MAILMAN_DEST(0.00)[freebsd-questions]; RCVD_COUNT_TWO(0.00)[2]
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.33
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2020 05:09:42 -0000

pf by design drops packets with IP options.  I am seeing quite a few of =
those packets on one of my systems.  Is there a way to tell pf to log =
those packets and if so, how do I identify them in the tcpdump output?

-- Doug