From owner-freebsd-pf@FreeBSD.ORG  Sat Dec  4 23:08:37 2004
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1199116A4CE
	for <freebsd-pf@freebsd.org>; Sat,  4 Dec 2004 23:08:37 +0000 (GMT)
Received: from mx02.mucip.net (mx02.mucip.net [81.92.162.10])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8AB6943D48
	for <freebsd-pf@freebsd.org>; Sat,  4 Dec 2004 23:08:36 +0000 (GMT)
	(envelope-from berni@birkenwald.de)
Received: from localhost (localhost [127.0.0.1])
	by mx02.mucip.net (Postfix) with ESMTP id E6EBC51FA;
	Sun,  5 Dec 2004 00:08:34 +0100 (CET)
Received: from mx02.mucip.net ([127.0.0.1])10024)
	with ESMTP id 24486-01; Sun, 5 Dec 2004 00:08:33 +0100 (CET)
Received: from cholera.birkenwald.intern (cholera.ipv6.birkenwald.de
	[IPv6:2001:a60:f001:1:2e0:18ff:fef4:5c37])
	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
	(Client did not present a certificate)
	by mailout.mucip.net (Postfix) with ESMTP id C7FA3408D;
	Sun,  5 Dec 2004 00:08:32 +0100 (CET)
From: Bernhard Schmidt <berni@birkenwald.de>
To: Daniel Hartmeier <daniel@benzedrine.cx>
In-Reply-To: <20041204200312.GE32076@insomnia.benzedrine.cx>
References: <slrncr28gr.ig8.berni@bschmidt.msgid.cybernet-ag.net>
	 <20041204200312.GE32076@insomnia.benzedrine.cx>
Content-Type: text/plain
Date: Sun, 05 Dec 2004 00:08:32 +0100
Message-Id: <1102201712.13533.6.camel@cholera>
Mime-Version: 1.0
X-Mailer: Evolution 2.0.2 
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at mucip.net
X-Mailman-Approved-At: Sun, 05 Dec 2004 12:59:17 +0000
Subject: Re: IPv6 MLD packets blocked
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical discussion and general questions about packet filter (pf)
	<freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Dec 2004 23:08:37 -0000

Hi,

> > http://www.birkenwald.de/~berni/tmp/mld.dump
> The decoded packet looks sane:

Just a quick guess, could this be the problem?

> ip6_opt
> 
>     ip6o_type	0x05 (IP6OPT_ROUTER_ALERT)
>     ip6o_len	0x02
>     ip6or_value	0x0000 (IP6_ALERT_MLD)

IPv6 Router Alert option is apparently only used by three protocols
(MLD, RSVP and so called "Active Networks message") according to
RFC2711, with MLD being the most widespread application. Without looking
at the code this is where I would look for it.

Bernhard