From owner-freebsd-pf@FreeBSD.ORG Thu Nov 12 22:49:29 2009 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7DE941065670 for ; Thu, 12 Nov 2009 22:49:29 +0000 (UTC) (envelope-from cbuechler@gmail.com) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.152]) by mx1.freebsd.org (Postfix) with ESMTP id 1292F8FC1A for ; Thu, 12 Nov 2009 22:49:28 +0000 (UTC) Received: by fg-out-1718.google.com with SMTP id e12so2061708fga.13 for ; Thu, 12 Nov 2009 14:49:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to :content-type; bh=AOOlkkJ05/rLVMhzi3YmZ6fCa4tEGk6M7Tk+KUW3y9s=; b=BLhoMfEK07zyVc6rzmjThNarRxHgC1s0+LObprupsa8ZAV6NlshXc+tSk4l8sN7zM+ 1jb/6bvGMjjqecCXOdpEy6dm5sq6qALzrtkRMhce2aUmKWdjQUM4/2ZncqVp9D+a40aO 3bVJq7MilBS5DVY/DZUKeO46Y9SobYyqI/exA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type; b=U2fN96lf2u5EXaA/EPgLaTtHHE9iKtZbz1Mt9dGf6hDXN0d9lcm4wgFmEPy7vj4di9 T4Cl7SO8dVOOkURm17m2dehmjQs8nSgJqV5AAK+50bcAZ2hs8xOi1sDwfOU2iky4QiIj tNLu+cPmE4B5U6oovgxayUsJACsTz/vBhkNkc= MIME-Version: 1.0 Sender: cbuechler@gmail.com Received: by 10.239.153.203 with SMTP id a11mr388542hbc.119.1258066167753; Thu, 12 Nov 2009 14:49:27 -0800 (PST) In-Reply-To: <200911122232.nACMW9Fu014283@freefall.freebsd.org> References: <200911122232.nACMW9Fu014283@freefall.freebsd.org> Date: Thu, 12 Nov 2009 17:49:27 -0500 X-Google-Sender-Auth: f2f05801d8b5a8f7 Message-ID: From: Chris Buechler To: freebsd-bugs@freebsd.org, freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Cc: Subject: Re: kern/140512: [pf] pf doesn't block udp packets on multicast addresses X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2009 22:49:29 -0000 On Thu, Nov 12, 2009 at 5:32 PM, wrote: > Old Synopsis: pf doesn't block udp packets on multicast addresses > New Synopsis: [pf] pf doesn't block udp packets on multicast addresses > This isn't a legit PR, tcpdump shows traffic before it's evaluated by the ruleset.