From owner-freebsd-pf@freebsd.org  Tue Jun  4 17:54:43 2019
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id CCC1515B9194
 for <freebsd-pf@mailman.ysv.freebsd.org>; Tue,  4 Jun 2019 17:54:43 +0000 (UTC)
 (envelope-from pi@freebsd.org)
Received: from home.opsec.eu (home.opsec.eu [IPv6:2001:14f8:200::1])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 5DC9976508
 for <freebsd-pf@freebsd.org>; Tue,  4 Jun 2019 17:54:43 +0000 (UTC)
 (envelope-from pi@freebsd.org)
Received: from pi by home.opsec.eu with local (Exim 4.92 (FreeBSD))
 (envelope-from <pi@freebsd.org>)
 id 1hYDe1-0006HY-VQ; Tue, 04 Jun 2019 19:54:46 +0200
Date: Tue, 4 Jun 2019 19:54:45 +0200
From: Kurt Jaeger <pi@freebsd.org>
To: David Mehler <dave.mehler@gmail.com>
Cc: freebsd-pf <freebsd-pf@freebsd.org>
Subject: Re: FreeBSD 12, pf, and Dual IP stack?
Message-ID: <20190604175445.GE5902@home.opsec.eu>
References: <CAPORhP5Mm49QPzBW7DgziS55EqeWSBDqn9vBkkeGpSdcsApUig@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAPORhP5Mm49QPzBW7DgziS55EqeWSBDqn9vBkkeGpSdcsApUig@mail.gmail.com>
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Jun 2019 17:54:44 -0000

Hi!

> I'm running a vps running FreeBSD 12 with pf as firewall. I've got a
> public ipv4 and a public ipv6 address, the latter is not going through
> a tunnel broker.
> 
> I can not wrap my head around ipv6 probably because I'm use to decimal
> representations and ipv4 addressing. If anyone has a primer I would
> welcome it.
> 
> With regards ipv6 I don't know if my address gives me one address or a
> range?

It gives you one IPv6 address, not a range.

But as the netmask is /64, you can add quite a few ipv6 interface
aliases to play with.

> If a range what I'm wanting to do is assign that range to jails
> running on a cloned interface lo1 so that each of them can have their
> own ipv6 as well as natted ipv4 addresses.

Yes, that might work.

-- 
pi@opsec.eu            +49 171 3101372                    One year to go !