From owner-freebsd-net@FreeBSD.ORG  Wed Jul 11 09:49:40 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id F3171106566C
	for <freebsd-net@freebsd.org>; Wed, 11 Jul 2012 09:49:40 +0000 (UTC)
	(envelope-from bzeeb-lists@lists.zabbadoz.net)
Received: from mx1.sbone.de (mx1.sbone.de [IPv6:2a01:4f8:130:3ffc::401:25])
	by mx1.freebsd.org (Postfix) with ESMTP id 8A91F8FC0C
	for <freebsd-net@freebsd.org>; Wed, 11 Jul 2012 09:49:40 +0000 (UTC)
Received: from c0246.aw.cl.cam.ac.uk (c0246.aw.cl.cam.ac.uk [128.232.100.246])
	(using TLSv1 with cipher AES128-SHA (128/128 bits))
	(No client certificate requested)
	by mx1.sbone.de (Postfix) with ESMTPSA id AC18125D3A0F
	for <freebsd-net@freebsd.org>; Wed, 11 Jul 2012 09:49:39 +0000 (UTC)
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Apple Message framework v1084)
From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
In-Reply-To: <CAPBZQG0SAs8HRj7XPxRmx5CL18qH8-SN0wnUm5Ef9OKbnSj63w@mail.gmail.com>
Date: Wed, 11 Jul 2012 09:49:38 +0000
Content-Transfer-Encoding: quoted-printable
Message-Id: <B44BD0C3-E5CC-4370-BCCA-5538568F4269@lists.zabbadoz.net>
References: <CAPKwmM0ymOebO0WsJqNRuRJ4sT09uikj9b-5x4BDe-eFJYyKFA@mail.gmail.com>
	<CAPBZQG0SAs8HRj7XPxRmx5CL18qH8-SN0wnUm5Ef9OKbnSj63w@mail.gmail.com>
To: FreeBSD Networking Mailing List <freebsd-net@freebsd.org>
X-Mailer: Apple Mail (2.1084)
Subject: Re: GIF tunnel doesnt like fragmented packets?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jul 2012 09:49:41 -0000


On 11. Jul 2012, at 07:14 , Ermal Lu=E7i wrote:

> On Wed, Jul 11, 2012 at 4:27 AM, Chris Benesch =
<chris.benesch@gmail.com> wrote:
>> So I'm trying to set up a tunnel with Hurricane Electric.  Works =
great on
>> OpenBSD BTW, took only a minute or two.
>>=20
> There is no support for fragmented ipv6 packets in pf(4) for FreeBSD.

It's wrong to say it like that.  There is no support for transparent =
reassembly and checking in FreeBSD but we can happily filter on IPv6 =
fragments and allow or block them.

/bz

--=20
Bjoern A. Zeeb                                 You have to have visions!
   It does not matter how good you are. It matters what good you do!