For multicast traffic, where must the filtering be placed to fulfill that requirement?