On Apr 3, 2005, at 6:58 PM, Russell Fulton wrote:
Hi,
We have pf running on a bridge . I am seeing packets being dropped by
pf between two machines that are on the same side of the bridge. Am I
correct in assuming that this is expected and that what is happening is
that the packets hit pf before they get to the bridge where they would
be discarded anyway? I.e. the filtering takes place at the interface.
This doesn't make any sense. If the hosts are both on the same segment, they should be attempting direct delivery on the LAN. Why would they pass traffic through the bridge at all?
If I don't want to see this stuff in the log then I guess I should put a
another rule before my generic 'block log' to 'block quick' (with no
log) for the addresses concerned.
You better give serious thought before putting in a "block quick", unless it's known bad traffic. If it's known bad traffic, then why are you asking if they should be blocked in the first place?
-- Jason Dixon DixonGroup Consulting http://www.dixongroup.net
