From owner-freebsd-questions@FreeBSD.ORG Fri Feb 22 00:14:57 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6921516A400 for ; Fri, 22 Feb 2008 00:14:57 +0000 (UTC) (envelope-from colin.brace@gmail.com) Received: from fk-out-0910.google.com (fk-out-0910.google.com [209.85.128.191]) by mx1.freebsd.org (Postfix) with ESMTP id ED54713C455 for ; Fri, 22 Feb 2008 00:14:56 +0000 (UTC) (envelope-from colin.brace@gmail.com) Received: by fk-out-0910.google.com with SMTP id b27so287570fka.11 for ; Thu, 21 Feb 2008 16:14:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; bh=FXjh9Rpy66jOIxSyRxxzwELVk8LNUpIPY6/cbCBENYE=; b=hSjDqU6i32Dx6zsrC0Ofu38zNhrBr66NLKDjwxV0rxW0ONME5sumBpfuPvQRQ2ztuZu3r16UiqBlMLluct53jXwS89ZjjlCXO3cm9RvZvd2XTG/HST25Wj3f+qofkms5wbcytBsTHuiz0f3s2q1sqz1298F9xS3vI/10yZiexM8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=Q6u7ChMerXMeLkgpUnW5Z3VlcKNnAba4R+rqfIjul2iRkhCHqmUG9wvm4iMRM23TAOurbrvht9OzzqU2GQXiMSQXpwHRbJKcPqkekavBlO9snq6/qLc7UYBgrbMl08xitrWYX/HC6X99D93BU1Nol58seMWlCmaL7X1rqwR/Ltk= Received: by 10.82.113.6 with SMTP id l6mr19873255buc.22.1203639295558; Thu, 21 Feb 2008 16:14:55 -0800 (PST) Received: by 10.82.108.2 with HTTP; Thu, 21 Feb 2008 16:14:55 -0800 (PST) Message-ID: Date: Fri, 22 Feb 2008 01:14:55 +0100 From: "Colin Brace" Sender: colin.brace@gmail.com To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Google-Sender-Auth: 87fa1b1543c271fa Subject: PF vs. ping6 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Feb 2008 00:14:57 -0000 Hi all, I am trying to set up a IPv6 tunnel following the instructions in the handbook . aiccu starts ok: # sixxs-aiccu start Tunnel Information for T14342: POP Id : nlams05 IPv6 Local : xxxxxxxxxxxxxxxxx2/64 IPv6 Remote : xxxxxxxxxxxxxxxxx1/64 Tunnel Type : 6in4-heartbeat Adminstate : enabled Userstate : enabled I can ping6 localhost, I can ping6 the tunnel begin point (local), but I can't ping6 the (remote) end point. Firing up tcpdump, I see that the firewall is blocking the ping packets. I have these (provisional) rules at the top of the filter section in PF: pass quick on fxp0 inet6 # ext if pass quick on gif0 inet6 to no avail; PF is still blocking ping6. Am I missing something here? -- Colin Brace Amsterdam http://lim.nl