If what you are looking for is to have PF block source-routed packets, there's an easy solution. OpenBSD has a sysctl option which can be set to allow or disallow routing of source-routed packets.
Maik Kuendig wrote:

Hello,

Can I change IP-Header Options, or filter based on them? I have not
found any point about that in the current man page, so I belive it's not
possible.

Is it a good idea to filter packages, as a example with "source routing",
or is it not nessesary and I ask a stupid question?


Thanks and best regards

Maik





Reply via email to