Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Feb 2008 01:14:55 +0100
From:      "Colin Brace" <cb@lim.nl>
To:        freebsd-questions@freebsd.org
Subject:   PF vs. ping6
Message-ID:  <aec9371b0802211614v6b886952k895ec5426ad5a0ee@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Hi all,

I am trying to set up a IPv6 tunnel following the instructions in the
handbook <http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-ipv6.html>.
aiccu starts ok:

# sixxs-aiccu start
Tunnel Information for T14342:
POP Id      : nlams05
IPv6 Local  : xxxxxxxxxxxxxxxxx2/64
IPv6 Remote : xxxxxxxxxxxxxxxxx1/64
Tunnel Type : 6in4-heartbeat
Adminstate  : enabled
Userstate   : enabled

I can ping6 localhost, I can ping6 the tunnel begin point (local), but
I can't ping6 the (remote) end point. Firing up tcpdump, I see that
the firewall is blocking the ping packets.

I have these (provisional) rules at the top of the filter section in PF:

pass quick on fxp0 inet6 # ext if
pass quick on gif0 inet6

to no avail; PF is still blocking ping6. Am I missing something here?

-- 
 Colin Brace
 Amsterdam
 http://lim.nl



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aec9371b0802211614v6b886952k895ec5426ad5a0ee>