why "block quick on wlan0" doesn't stop DHCP?

Greg Hennessy Greg.Hennessy at nviz.net
Fri Jan 28 09:58:20 UTC 2011


Could be talking complete nonsense here, but....

IIRC BPF sees all traffic before PF. DHCP hooks at the BPF layer, so it'll be serviced before any filtering policy applies. 


Greg
 

> -----Original Message-----
> From: owner-freebsd-pf at freebsd.org [mailto:owner-freebsd-
> pf at freebsd.org] On Behalf Of Michael
> Sent: 28 January 2011 9:20 AM
> To: freebsd-pf at freebsd.org
> Subject: why "block quick on wlan0" doesn't stop DHCP?
> 
> Hello,
> 
> Here is my simple rule set:
> 
> set loginterface wlan0
> block log
> block quick on wlan0
> 
> Now I'm booting my 8.1-R box. After it's up and running with pf I'm
> powering on my wireless access point.
> 
> After couple seconds my wlan0 is associated and receives it's IP
> address. I don't understand why was it not stopped by pf?
> And how can I tune my rules to be able to control DHCP conversation?
> 
> Michael
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"


More information about the freebsd-pf mailing list