On Thu, Jan 02, 2020 at 12:27:40PM -0500, Sonic wrote:

> On Thu, Jan 2, 2020 at 1:00 AM Sebastien Marie <sema...@online.fr> wrote:
> > <snip> And by default, packets
> > with ip-options are block-logged.
> 
> Can't seem to find that specific info anywhere.

see man pf.conf and then search for allow-opts

        -Otto

> 
> > I suppose that adding an explicit rule with allow-opts should do the trick.
> > depending your need (block or allow):
> >         block return proto igmp to 224/4 allow-opts
> > or
> >         pass proto igmp to 224/4 allow-opts
> 
> I used:
>         block proto igmp
> 
> Thanks!
> Chris
> 

Reply via email to