do not block broadcast/multicast per default, this should be configurable