From owner-freebsd-net@FreeBSD.ORG  Tue Feb  8 15:31:24 2011
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 7CEC410656C8
	for <net@freebsd.org>; Tue,  8 Feb 2011 15:31:24 +0000 (UTC)
	(envelope-from ume@mahoroba.org)
Received: from mail.mahoroba.org (ent.mahoroba.org [IPv6:2001:2f0:104:8010::1])
	by mx1.freebsd.org (Postfix) with ESMTP id 27FDF8FC20
	for <net@freebsd.org>; Tue,  8 Feb 2011 15:31:23 +0000 (UTC)
Received: from yuga.mahoroba.org (ume@yuga.mahoroba.org
	[IPv6:2001:2f0:104:8010:21b:d3ff:fe38:5381])
	(user=ume mech=DIGEST-MD5 bits=0)
	by mail.mahoroba.org (8.14.4/8.14.4) with ESMTP/inet6 id p18FVBmk039572
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Wed, 9 Feb 2011 00:31:17 +0900 (JST) (envelope-from ume@mahoroba.org)
Date: Wed, 09 Feb 2011 00:31:11 +0900
Message-ID: <ygesjvyfsqo.wl%ume@mahoroba.org>
From: Hajimu UMEMOTO <ume@freebsd.org>
To: "Eugene M. Zheganin" <emz@norma.perm.ru>
In-Reply-To: <4D510762.7090304@norma.perm.ru>
References: <4D510762.7090304@norma.perm.ru>
User-Agent: xcite1.60> Wanderlust/2.15.9 (Almost Unreal) SEMI/1.14.6
	(Maruoka) FLIM/1.14.9 (=?ISO-2022-JP-2?B?R29qGyQoRCtXGyhC?=) APEL/10.8
	Emacs/23.2 (i386-portbld-freebsd8.1) MULE/6.0 (HANACHIRUSATO)
X-Operating-System: FreeBSD 8.2-PRERELEASE
X-PGP-Key: http://www.imasy.or.jp/~ume/publickey.asc
X-PGP-Fingerprint: 1F00 0B9E 2164 70FC 6DC5  BF5F 04E9 F086 BF90 71FE
Organization: Internet Mutual Aid Society, YOKOHAMA
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.6
	(mail.mahoroba.org [IPv6:2001:2f0:104:8010::1]);
	Wed, 09 Feb 2011 00:31:17 +0900 (JST)
X-Virus-Scanned: clamav-milter 0.96.5 at asuka.mahoroba.org
X-Virus-Status: Clean
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on asuka.mahoroba.org
Cc: FreeBSD Net <net@freebsd.org>
Subject: Re: ipfw, ipv6 and gif(4)
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Feb 2011 15:31:24 -0000

Hi,

>>>>> On Tue, 08 Feb 2011 14:05:38 +0500
>>>>> "Eugene M. Zheganin" <emz@norma.perm.ru> said:

emz> As you can see, P:41 is IPv6:

emz> %grep 41 /etc/protocols
emz> ipv6    41      IPV6            # ipv6

emz> And, of course, ipfw doesn't allow me to create the rules it is
emz> actually logging:

emz> %ipfw add 7 allow 41 from 216.66.80.26 to 89.250.210.67 in via vlan104
emz> ipfw: bad address "216.66.80.26"

emz> Do I misunderstand the concept, or is it how it really should look ?

Something like `pass ip4 from any to any proto ipv6' should work for
you.

Sincerely,

--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume@mahoroba.org  ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/