npf and dhcp

[BERTRAND Joël <joel.bertrand%systella.fr@localhost>]

	Hello,

	I'm configuring a new vlan on my main router. I have written in npf.conf :

group "invites" on $vlan15_if {
    pass in final family inet4 proto icmp all
    pass out final family inet4 proto icmp all

    pass in final family inet6 proto ipv6-icmp all
    pass out final family inet6 proto ipv6-icmp all

    pass stateful in final family inet4 proto udp \
            from 192.168.15.0/24 to 192.168.15.128 port domain

    pass stateful in final family inet4 proto tcp \
            from 192.168.15.0/24 to any port http
    pass stateful in final family inet4 proto tcp \
            from 192.168.15.0/24 to any port https

    pass stateful in final family inet6 proto tcp \
            from any to any port http
    pass stateful in final family inet6 proto tcp \
            from any to any port https

    block final all
}

...

group default {
    pass final on lo0 all
    block all
}

	When I have connected a laptop on vlan15, it have sent a DHCP request
and... my NetBSD server answered...

	As boots and bootc ports are closed, how can this server answer to DHCP
request ?

	Best regards,

	JB

Attachment: signature.asc
Description: OpenPGP digital signature