https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259879
Kristof Provost <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #1 from Kristof Provost <[email protected]> --- I've been able to replicate part of this on main. It looks like the IGMP packets are dropped because they have IP header options, which appears to be expected behaviour: allow-opts By default, IPv4 packets with IP options or IPv6 packets with routing extension headers are blocked. When allow-opts is specified for a pass rule, packets that pass the filter based on that rule (last matching) do so even if they contain IP options or routing extension headers. For packets that match state, the rule that initially created the state is used. The implicit pass rule that is used when a packet does not match any rules does not allow IP options. -- You are receiving this mail because: You are the assignee for the bug.
