From owner-freebsd-ipfw@FreeBSD.ORG Sun Nov 27 05:30:27 2005 Return-Path: X-Original-To: freebsd-ipfw@hub.freebsd.org Delivered-To: freebsd-ipfw@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B573B16A41F for ; Sun, 27 Nov 2005 05:30:27 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id AD86443D64 for ; Sun, 27 Nov 2005 05:30:09 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id jAR5U8LG035353 for ; Sun, 27 Nov 2005 05:30:08 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id jAR5U8NW035352; Sun, 27 Nov 2005 05:30:08 GMT (envelope-from gnats) Date: Sun, 27 Nov 2005 05:30:08 GMT Message-Id: <200511270530.jAR5U8NW035352@freefall.freebsd.org> To: freebsd-ipfw@FreeBSD.org From: Hajimu UMEMOTO Cc: Subject: Re: kern/89472: ipfw2 no longer supports filtering IPv6-over-IPv4 on 6.0-RELEASE X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Hajimu UMEMOTO List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Nov 2005 05:30:27 -0000 The following reply was made to PR kern/89472; it has been noted by GNATS. From: Hajimu UMEMOTO To: gael.roualland@dial.oleane.com Cc: FreeBSD-gnats-submit@freebsd.org Subject: Re: kern/89472: ipfw2 no longer supports filtering IPv6-over-IPv4 on 6.0-RELEASE Date: Sun, 27 Nov 2005 14:20:37 +0900 Hi, >>>>> On Sun, 27 Nov 2005 05:10:15 GMT >>>>> Hajimu UMEMOTO said: ume> Oops, please try this patch instead. Umm, the patch was encoded by quoted-printable wrongly. So, I've resend it. Index: sbin/ipfw/ipfw2.c diff -u -p sbin/ipfw/ipfw2.c.orig sbin/ipfw/ipfw2.c --- sbin/ipfw/ipfw2.c.orig Sat Aug 20 17:36:57 2005 +++ sbin/ipfw/ipfw2.c Sun Nov 27 13:19:40 2005 @@ -3596,7 +3596,7 @@ add_proto(ipfw_insn *cmd, char *av, u_ch *proto = IPPROTO_IP; - if (_substrcmp(av, "all") == 0) + if (_substrcmp(av, "all") == 0 || strcmp(av, "ip") == 0) ; /* do not set O_IP4 nor O_IP6 */ else if (strcmp(av, "ipv4") == 0 || strcmp(av, "ip4") == 0) /* explicit "just IPv4" rule */ @@ -3606,13 +3606,12 @@ add_proto(ipfw_insn *cmd, char *av, u_ch *proto = IPPROTO_IPV6; fill_cmd(cmd, O_IP6, 0, 0); } else if ((*proto = atoi(av)) > 0) - ; /* all done! */ - else if ((pe = getprotobyname(av)) != NULL) + fill_cmd(cmd, O_PROTO, 0, *proto); + else if ((pe = getprotobyname(av)) != NULL) { *proto = pe->p_proto; - else - return NULL; - if (*proto != IPPROTO_IP && *proto != IPPROTO_IPV6) fill_cmd(cmd, O_PROTO, 0, *proto); + } else + return NULL; return cmd; } Sincerely, -- Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan ume@mahoroba.org ume@{,jp.}FreeBSD.org http://www.imasy.org/~ume/