From owner-freebsd-pf@FreeBSD.ORG  Sat Mar 26 18:43:50 2011
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 13C20106566C;
	Sat, 26 Mar 2011 18:43:50 +0000 (UTC)
	(envelope-from remko@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id DFFE98FC18;
	Sat, 26 Mar 2011 18:43:49 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p2QIhn3U056957;
	Sat, 26 Mar 2011 18:43:49 GMT
	(envelope-from remko@freefall.freebsd.org)
Received: (from remko@localhost)
	by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p2QIhnw2056953;
	Sat, 26 Mar 2011 18:43:49 GMT (envelope-from remko)
Date: Sat, 26 Mar 2011 18:43:49 GMT
Message-Id: <201103261843.p2QIhnw2056953@freefall.freebsd.org>
To: eugene@zhegan.in, remko@FreeBSD.org, freebsd-pf@FreeBSD.org
From: remko@FreeBSD.org
Cc: 
Subject: Re: kern/155945: [pf] [ip6] pf match engine is broken with ipv6
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 26 Mar 2011 18:43:50 -0000

Synopsis: [pf] [ip6] pf match engine is broken with ipv6

State-Changed-From-To: open->feedback
State-Changed-By: remko
State-Changed-When: Sat Mar 26 18:39:38 UTC 2011
State-Changed-Why: 
>From the quick look I did, I can see it matches rule 107. It continues
parsing till it does no longer finds something that matches, which is
107 in this case.

>From what I know proto ipv6 is not the same as proto inet6, where proto ipv6
means for me the tunnel that I have to sixxs.net while inet6 is the native ipv6
communication.

So you may want to consider changing rule 128 to do the thing you want it to do.

Can you get back to me to tell whether this works or not?

Thanks,
Remko

http://www.freebsd.org/cgi/query-pr.cgi?pr=155945