From owner-freebsd-pf@freebsd.org  Thu Jun 11 19:54:04 2020
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 42EE833FD34
 for <freebsd-pf@mailman.nyi.freebsd.org>; Thu, 11 Jun 2020 19:54:04 +0000 (UTC)
 (envelope-from longwitz@incore.de)
Received: from dss.incore.de (dss.incore.de [195.145.1.138])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 49jZLM3hYDz4KJD
 for <freebsd-pf@freebsd.org>; Thu, 11 Jun 2020 19:54:03 +0000 (UTC)
 (envelope-from longwitz@incore.de)
Received: from inetmail.dmz (inetmail.dmz [10.3.0.3])
 by dss.incore.de (Postfix) with ESMTP id 5DA4F2BBE0;
 Thu, 11 Jun 2020 21:54:02 +0200 (CEST)
X-Virus-Scanned: amavisd-new at incore.de
Received: from dss.incore.de ([10.3.0.3])
 by inetmail.dmz (inetmail.dmz [10.3.0.3]) (amavisd-new, port 10024)
 with LMTP id FT5cN_vEBK8p; Thu, 11 Jun 2020 21:54:01 +0200 (CEST)
Received: from mail.local.incore (fwintern.dmz [10.0.0.253])
 by dss.incore.de (Postfix) with ESMTP id C32A32BBDE;
 Thu, 11 Jun 2020 21:54:01 +0200 (CEST)
Received: from bsdmhs.longwitz (unknown [192.168.99.6])
 by mail.local.incore (Postfix) with ESMTP id AA85B187;
 Thu, 11 Jun 2020 21:54:01 +0200 (CEST)
Message-ID: <5EE28BD9.2010209@incore.de>
Date: Thu, 11 Jun 2020 21:54:01 +0200
From: Andreas Longwitz <longwitz@incore.de>
User-Agent: Thunderbird 2.0.0.19 (X11/20090113)
MIME-Version: 1.0
To: Kristof Provost <kristof@sigsegv.be>
CC: freebsd-pf@freebsd.org
Subject: Re: Flow of broadcast/multicast packets in pf when a bridge is present
References: <5E074209.2070801@incore.de>
 <F95EB0E0-8CAF-4F76-858F-C7479967BCB4@sigsegv.be>
In-Reply-To: <F95EB0E0-8CAF-4F76-858F-C7479967BCB4@sigsegv.be>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Rspamd-Queue-Id: 49jZLM3hYDz4KJD
X-Spamd-Bar: --
Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none;
 spf=pass (mx1.freebsd.org: domain of longwitz@incore.de designates
 195.145.1.138 as permitted sender) smtp.mailfrom=longwitz@incore.de
X-Spamd-Result: default: False [-2.54 / 15.00]; ARC_NA(0.00)[];
 NEURAL_HAM_MEDIUM(-0.96)[-0.964]; RCVD_COUNT_FIVE(0.00)[5];
 FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[];
 R_SPF_ALLOW(-0.20)[+mx:c]; NEURAL_HAM_LONG(-1.00)[-1.004];
 MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[incore.de];
 TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-0.27)[-0.275];
 RCPT_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[];
 R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:3320, ipnet:195.145.0.0/16, country:DE];
 RCVD_TLS_LAST(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.33
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Jun 2020 19:54:04 -0000

I like to mention that after update to FreeBSD 12.1 Stable r360998 the
correct patch is:

--- if_bridge.c.1st     2020-02-05 01:47:03.000000000 +0100
+++ if_bridge.c 2020-05-18 17:41:11.000000000 +0200
@@ -2406,6 +2406,10 @@
                        (*bifp->if_input)(bifp, mc2);
                }

+               if (!V_pfil_local_phys ) {
+                       m_freem(m);
+                       return (NULL);
+               }
                /* Return the original packet for local processing. */
                return (m);
        }

Andreas