From owner-freebsd-current Sun Jul 1 5:21:29 2001 Delivered-To: freebsd-current@freebsd.org Received: from freesbee.wheel.dk (freesbee.wheel.dk [193.162.159.97]) by hub.freebsd.org (Postfix) with ESMTP id A37BD37B401 for ; Sun, 1 Jul 2001 05:21:21 -0700 (PDT) (envelope-from ncbp@bank-pedersen.dk) Received: by freesbee.wheel.dk (Postfix, from userid 1002) id 7D8C35D6A; Sun, 1 Jul 2001 14:21:20 +0200 (CEST) Date: Sun, 1 Jul 2001 14:21:20 +0200 From: "Niels Chr. Bank-Pedersen" To: current@freebsd.org Subject: ipfilter+ipv6 - what am I missing? Message-ID: <20010701142120.C770@bank-pedersen.dk> Mail-Followup-To: "Niels Chr. Bank-Pedersen" , current@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i X-PGP-Fingerprint: 18D0 73F3 767F 3A40 CEBA C595 4783 D7F5 5DD1 FB8C X-PGP-Public-Key: http://freesbee.wheel.dk/~ncbp/gpgkey.pub Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi, On yesterdays -current I'm having some problems making ipfilter DTRT with ipv6 packets: bm# ipfstat -6io block out quick on xl0 from any to any block out quick on vx0 from any to any block in quick on xl0 from any to any block in quick on vx0 from any to any (passing ipv6 traffic) bm# ipfstat -6 IPv6 packets: in 0 out 0 Even with the above ruleset installed, ipfilter doesn't block any traffic at all, and counters for ipv6 packets remains at zero while successfully running various ipv6 sessions through the firewall, so what am I missing here? Feel free to flame me if I am missing the obvious :-) /Niels Chr. -- Niels Christian Bank-Pedersen, NCB1-RIPE. Network Manager, TDC, IP-section. "Hey, are any of you guys out there actually *using* RFC 2549?" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message