On Thu, Jan 02, 2020 at 12:27:40PM -0500, Sonic wrote:
> On Thu, Jan 2, 2020 at 1:00 AM Sebastien Marie <sema...@online.fr> wrote:
> > <snip> And by default, packets
> > with ip-options are block-logged.
>
> Can't seem to find that specific info anywhere.
see man pf.conf and then search for allow-opts
-Otto
>
> > I suppose that adding an explicit rule with allow-opts should do the trick.
> > depending your need (block or allow):
> > block return proto igmp to 224/4 allow-opts
> > or
> > pass proto igmp to 224/4 allow-opts
>
> I used:
> block proto igmp
>
> Thanks!
> Chris
>
