npf and dhcp

BERTRAND Joël <[email protected]> Mon, 25 May 2026 17:04:11 +0200

Newsgroups	gmane.os.netbsd.general
Message-ID	<[email protected]>

	Hello,

	I'm configuring a new vlan on my main router. I have written in npf.conf :

group "invites" on $vlan15_if {
    pass in final family inet4 proto icmp all
    pass out final family inet4 proto icmp all

    pass in final family inet6 proto ipv6-icmp all
    pass out final family inet6 proto ipv6-icmp all

    pass stateful in final family inet4 proto udp \
            from 192.168.15.0/24 to 192.168.15.128 port domain

    pass stateful in final family inet4 proto tcp \
            from 192.168.15.0/24 to any port http
    pass stateful in final family inet4 proto tcp \
            from 192.168.15.0/24 to any port https

    pass stateful in final family inet6 proto tcp \
            from any to any port http
    pass stateful in final family inet6 proto tcp \
            from any to any port https

    block final all
}

...

group default {
    pass final on lo0 all
    block all
}

	When I have connected a laptop on vlan15, it have sent a DHCP request
and... my NetBSD server answered...

	As boots and bootc ports are closed, how can this server answer to DHCP
request ?

	Best regards,

	JB

signature.asc (application/pgp-signature, 228 B)