Hello,

        I'm configuring a new vlan on my main router. I have written in 
npf.conf :

group "invites" on $vlan15_if {
    pass in final family inet4 proto icmp all
    pass out final family inet4 proto icmp all

    pass in final family inet6 proto ipv6-icmp all
    pass out final family inet6 proto ipv6-icmp all

    pass stateful in final family inet4 proto udp \
            from 192.168.15.0/24 to 192.168.15.128 port domain

    pass stateful in final family inet4 proto tcp \
            from 192.168.15.0/24 to any port http
    pass stateful in final family inet4 proto tcp \
            from 192.168.15.0/24 to any port https

    pass stateful in final family inet6 proto tcp \
            from any to any port http
    pass stateful in final family inet6 proto tcp \
            from any to any port https

    block final all
}

...

group default {
    pass final on lo0 all
    block all
}

        When I have connected a laptop on vlan15, it have sent a DHCP request
and... my NetBSD server answered...

        As boots and bootc ports are closed, how can this server answer to DHCP
request ?

        Best regards,

        JB

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to