Hacker News Reader

Put OpenBSD in front to protect that little scared penguin.

That would only work if OpenBSD is terminating that connection.

OpenBSD packet filter blocks packets with IPv4 options or IPv6 hop-by-hop or destination options header by default, according to `man pf.conf`.