[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-pf
Subject:    [Bug 226850] [pf] Matching but failed rules block without return
From:       bugzilla-noreply () freebsd ! org
Date:       2018-03-29 16:58:04
Message-ID: bug-226850-17777-JEoqoGslsu () https ! bugs ! freebsd ! org/bugzilla/
[Download RAW message or body]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226850

--- Comment #12 from Ermal Luçi <eri@freebsd.org> ---
I misread the issue you are experiencing.
I do not see any impact on this apart of either 
- overloading the set block-policy global to express the global policy. pf
already marks as dropped the packets that go through failure paths.
- Introduce a new global policy like set failure-return-policy. 

In both scenarios the underlying implementation does not differ.
I am not sure on the added value of having it be controllable per-rule!

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-pf@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"

[prev in list] [next in list] [prev in thread] [next in thread]