Project

General

Profile

Feature #54

Ability to allow IP options

Added by Chris Buechler almost 10 years ago. Updated almost 10 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
08/20/2009
Due date:
% Done:

0%

Estimated time:

Description

PF sensibly blocks packets with IP options by default.
http://www.openbsd.org/faq/pf/filter.html#ipopts

But we have no way to bypass this for scenarios where IP options are needed. Need an advanced checkbox for allow-opts.

History

#1 Updated by Ermal Lu├ži almost 10 years ago

  • Status changed from New to Resolved

As far as i know 2.0 has this resolved since under firewall rules -> Advanced option button there is such a choice i merged because it is needed with multicast traffic(sometimes).

#2 Updated by Chris Buechler almost 10 years ago

Ah yes, I hadn't noticed that box. Just tried it and it works.

Also available in: Atom PDF