On 11/30/2006 11:57:30 PM, Daniel Hartmeier wrote:
If you, or anyone else, can suggest a sentence or paragraph to add to
the FAQ that makes this clear, please do.
I think a little additional specificity would make clear
the example-ness of it all. Like this:
On 11/30/2006 07:14:14 PM, Russell Fulton wrote:
<quote>
IP Options
By default, PF blocks packets with IP options set. This can make the
job
more difficult for "OS fingerprinting" utilities like nmap. If you
have
an application that requires the passing of these packets, such as
multicast or IGMP, you can use the allow-opts directive:
multicast or IGMP, you can use the allow-opts directive. E.g. to
pass IGMP packets with options:
pass in quick on fxp0 all allow-opts
pass in quick on fxp0 proto igmp all allow-opts
</quote>
Karl <[EMAIL PROTECTED]>
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein
